One month after Microsoft disclosed the flaw, nearly 1 million systems remain unpatched, and Internet scans looking for vulnerable systems have begun increasing.

The development follows speculation and concern among security experts that the attack group would expand its scope to the power grid.

Future improvements to Chrome will fix a gap in Incognito Mode, preventing publishers from blocking users from using incognito mode to jump over soft paywalls.

Attackers are exploiting a Linux Exim critical flaw to execute remote commands, download crypto miners and sniff out other vulnerable servers.

Ransomware attacks can disrupt business and lead to massive costs, according to Forrester. Here's why you should consider paying along with other incident response plans.

No organization can prioritize and mitigate hundreds of risks effectively. The secret lies in carefully filtering out the risks, policies, and processes that waste precious time and resources.

A food bank hit by ransomware, advice on cybersecurity training, and a university data breach - catch up on the week's news with this recap!

Two lawsuits are seeking class-action status, alleging that Amazon records children and stores their voiceprints indefinitely.

XENOTIME, a destructive APT linked to Russia, has broadened its target set beyond Middle East oil and gas.

Researchers at the Workshop on the Economics of Information Security highlight the cost savings of sharing cybersecurity data and push for greater access to information on breaches, attacks, and incidents.

Threatpost editors Tara Seals and Lindsey O'Donnell discuss a recent lawsuit against Amazon for its privacy policies, a Telegram DDoS attack and more.

Attackers continue to push the boundaries with modular trojans and ransomware attacks, a new report found.

A researcher has found a significant exploit in one of the most frequently used text editors.

ASCO is the latest headline-making organization to be hit by ransomware, prompting many companies to consider what to do to minimize their risk.

In a year when security companies have been snapped up left and right, these deals stand out from the chaos.

These vulnerable infusion pumps can be remotely hacked to alter the delivery of IV fluids and medications such as painkillers or insulin.

A deepfake was reportedly spotted in the wild: LinkedIn’s well-connected, young, attractive Eurasia/Russia expert “Katie Jones.”

The LaLiga app used phones’ GPS and microphones to sniff out bars that were broadcasting soccer matches illegally.