The breach exposed credit card application data, Social Security numbers, and linked bank accounts, among other information.

Lack of security in the default settings of Internet-enabled video cameras make co-opting video feeds not just a movie-hacker technique, but a reality for millions of cameras.

The law, which updates data breach notification requirements in the state, was one of two forms of legislation signed last week to better protect New York residents against security breaches.

New study exposes low confidence among security professionals in their security operations centers.

Remote exploitation can be achieved with no user interaction.

Google Project Zero researchers found an iOS vulnerability that could let an attacker snoop on a victim's phone remotely.

Hackers with physical access to small aircraft can easily hack the plane's CAN bus system and take control of the navigation systems.

Cyber security's comprehensive news site is now an online community for security professionals, outlining cyber threats and the technologies for defending against them.

Organizations are increasingly turning to containers even though they are not as confident in the security of those containers, according to a new survey.

It would require taking over and stranding 20% of a city’s cars to freeze traffic, and only 10% to impede ambulances, physicists calculate.

X.509 certificates help secure the identity, privacy, and communication between two endpoints, but these digital certificates also have built-in expirations and must be managed.

Lackadaisical security practices in proprietary management software from a hardware vendor underscore the need for a vendor-agnostic solution.

Cyber security's comprehensive news site is now an online community for security professionals, outlining cyber threats and the technologies for defending against them.

Android patched more CVEs than Apple did, according to a Zimperium report.

Phishing and credential stuffing attacks are top threats to financial services organizations and customers, according to Akamai.

Threatpost editors discuss the top trends, keynotes and sessions that they look forward to at Black Hat USA and DEF CON 2019.

The Department of Public Safety says it won’t pay, but given the umpteen times the state’s agencies have been hit, somebody’s not listening.

Google’s Project Zero has unveiled details of a bug in Apple’s iMessage that lets attackers read data from an iPhone without any user interaction.

These early-stage security trends have not yet seen widespread adoption, but may in the near future, according to CB Insights.