Attackers are using the recently emerged browser-in-the-browser phishing technique to steal accounts from Valve's popular gaming platform, but it's a warning shot to businesses.

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

It takes culture as well as individual and corporate responsibilities to ensure workforce data privacy and compliance.

Suspect allegedly thought he was swapping secrets with a foreign government for crypto — but the contact turned out to be an FBI agent.

The Telstra cyber incident comes just weeks after its main rival Optus suffered a major compromise of its customer database.

Researchers had discovered that Microsoft's original mitigation steps for the so-called "ProxyNotShell" flaws was easily bypassed.

Announcing its exposure management platform, Tenable joins other companies in offering ways — such as attack surface management — to look at business networks through the eyes of attackers.

Becoming a big wheel doesn't have to cost your happiness, but grind culture makes that likely.

A novel mobile malware found lurking behind a phone-spoofing app is being distributed via Telegram and a dedicated website, in a broad operation to monitor corporate victims.

Executives fear "malicious insiders" as top cyber threat to companies, research shows. Reasonable steps to secure and monitor systems may prevent reputational damage but are not enough.

If your security team is considering, planning, building, or operating a threat intelligence capability, this advice can help.

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

Argument injection bug posed RCE risk

New investment to fuel the offensive security leader's record-breaking growth and innovation pipeline.

Some thoughts for Cybersecurity Awareness Month: Is is worth reporting nuisance calls? Is it even worth reporting outright scams?

Two years of scamming + $10 million leeched = 25 years in prison. Just in time for #Cybermonth.

As threat actors' sophistication has grown dramatically in the last few years, organizations haven't kept up with implementing the necessary countermeasure controls.

Judge tells the accused that if he hadn’t pleaded guilty, “I would have given you life.”

In one shot, Trojan dropper NullMixer installs a suite of downloaders, banking Trojans, stealers, and spyware on victims' systems.

Users and malicious actors interact with your business through the application layer. Build trust in your software by securing this first line of defense.

Advanced attackers gained access to Microsoft Exchange services, conducted searches of email, and used an open source toolkit to collect data from the network for nearly a year.