When creating security metrics, it's critical that test methodologies cover multiple scenarios to ensure that devices perform as expected in all environments.

Lock down all SFTP users on your data center Linux servers with a chroot jail.

From ZIP attachments spreading Gandcrab, to DOC files distributing Trickbot, researchers tracked five widescale spam campaigns in 2019 that have made use of malicious attachments.

In its latest observed campaign, there were also overlaps in victimology with the DarkHotel APT.

Yet 68% of US consumers agree they also must do more to protect their own information.

Compromised information includes full names, birth dates, national ID numbers, medical insurance numbers, and other personal data.

The FTC told Congress last week that if a national privacy law gets passed, it wants more resources and greater authority to impose penalties under it.

Three marketing tools, including the Best Of The Web security logomark, were compromised in supply chain attacks, allegedly leaving website customers leaking their users' sensitive information.

A Twitter glitch "inadvertently" leaked iOS users' location data to an unnamed partner.

New form of ransomware MegaCortex shares commonalities with LockerGoga, enterprise malware recently seen in major cyberattacks.

The two high-severity bugs impact a wide array of enterprise, military and government networks.

A linked pair of vulnerabilities could allow an attacker to take over many different types of Cisco networking components.

ScarCruft has evolved into a skilled and resourceful threat group, new research shows.