X.509 certificates help secure the identity, privacy, and communication between two endpoints, but these digital certificates also have built-in expirations and must be managed.

Lackadaisical security practices in proprietary management software from a hardware vendor underscore the need for a vendor-agnostic solution.

Cyber security's comprehensive news site is now an online community for security professionals, outlining cyber threats and the technologies for defending against them.

Android patched more CVEs than Apple did, according to a Zimperium report.

Phishing and credential stuffing attacks are top threats to financial services organizations and customers, according to Akamai.

Threatpost editors discuss the top trends, keynotes and sessions that they look forward to at Black Hat USA and DEF CON 2019.

The Department of Public Safety says it won’t pay, but given the umpteen times the state’s agencies have been hit, somebody’s not listening.

Google’s Project Zero has unveiled details of a bug in Apple’s iMessage that lets attackers read data from an iPhone without any user interaction.

These early-stage security trends have not yet seen widespread adoption, but may in the near future, according to CB Insights.

Aiming for attribution doesn't help most organizations become more secure. It can actually have the opposite effect.

Expect a full slate of enterprise-class open source tools to take the spotlight when security researchers share their bounties with the community at large.

Anyone can listen to the camera's audio over the internet.

In addition, Google’s latest Chrome version implements 43 new security fixes.

There are 11 security flaws affecting VxWorks: “the most widely used operating system you may never have heard about”.

New research shows how enterprises are adding additional layers of authentication.

Altitude Networks, led by Michael Coates and Amir Kavousian, aims to prevent accidental and malicious file sharing.

The legislation, which cites a rash of Chinese IP theft, would develop a national strategy to prevent risks to U.S. tech.

Security is hard enough without adding multiple clouds into the mix.

Is there something strange about your network activity? Better make sure all of your IoT devices are under control.

A researcher said that he found a Honda ElasticSearch database exposing 40GB of internal system and device data.