No organization can prioritize and mitigate hundreds of risks effectively. The secret lies in carefully filtering out the risks, policies, and processes that waste precious time and resources.

A food bank hit by ransomware, advice on cybersecurity training, and a university data breach - catch up on the week's news with this recap!

Two lawsuits are seeking class-action status, alleging that Amazon records children and stores their voiceprints indefinitely.

XENOTIME, a destructive APT linked to Russia, has broadened its target set beyond Middle East oil and gas.

Researchers at the Workshop on the Economics of Information Security highlight the cost savings of sharing cybersecurity data and push for greater access to information on breaches, attacks, and incidents.

Threatpost editors Tara Seals and Lindsey O'Donnell discuss a recent lawsuit against Amazon for its privacy policies, a Telegram DDoS attack and more.

Attackers continue to push the boundaries with modular trojans and ransomware attacks, a new report found.

A researcher has found a significant exploit in one of the most frequently used text editors.

ASCO is the latest headline-making organization to be hit by ransomware, prompting many companies to consider what to do to minimize their risk.

In a year when security companies have been snapped up left and right, these deals stand out from the chaos.

These vulnerable infusion pumps can be remotely hacked to alter the delivery of IV fluids and medications such as painkillers or insulin.

A deepfake was reportedly spotted in the wild: LinkedIn’s well-connected, young, attractive Eurasia/Russia expert “Katie Jones.”

The LaLiga app used phones’ GPS and microphones to sniff out bars that were broadcasting soccer matches illegally.

Learn new enterprise-grade techniques for identifying vulnerabilities, improving Active Directory security, and building trust with customers at Black Hat USA this summer.

Most companies' cloud security operations would benefit significantly from clean-up, alignment, and organization.

The attackers behind the Triton, or Xenotime, intrusions into critical infrastructure (CI) safety systems are testing their skills against electric power companies. Options for defense are still limited, however.