Notable new infection chain uses PDF to embed malicious files, load remote exploits, shellcode encryption, and more, new research shows.

But there was a substantial drop in the overall number of critical vulnerabilities that the company disclosed last year, new analysis shows.

Ransomware has become so efficient, and the underground economy so professional, that traditional monetization of stolen data may be on its way out.

A suspicious developer appears to have performed a domain hijack to take over the original project

Verizon's "2022 Data Breach Investigations Report" repeatedly makes the point that criminals are stealing credentials to carry out their attacks.

The Google Project Zero researcher found a bug in XML parsing on the Zoom client and server.

2022’s DBIR also highlighted the far-reaching impact of supply-chain breaches and how organizations and their employees are the reasons why incidents occur.

Critical vulnerability has been fixed upstream, but Tails dev team ‘doesn’t have the capacity to publish an emergency release earlier’

A slip-up by a malware author has allowed researchers to taxonomize three ransomware variations going by different names.

A DDoS campaign observed by Akamai from actors claiming to be REvil would represent a major pivot in tactics for the gang.