Experts on a panel at Black Hat stressed Wednesday that there's never been a greater need for hackers and public interest technologists to foster a safe digital society.

The algorithms that check for a user's 'liveness' have blind spots that can lead to vulnerabilities.

In his Black Hat USA keynote, Square's Dino Dai Zovi discussed lessons learned throughout his cybersecurity career and why culture trumps strategy.

Academic researchers carry out attacks on high-end commercial devices as well as narrowband IoT sensors.

At Black Hat USA 2019, researchers showed how a flaw on Windows systems could allow arbitrary code execution on Hyper-V.

A raft of bugs in six popular models can allow a hacker to wreak havoc on a corporate network.

Attack vectors disclosed last year are still fully exploitable, researchers demoed at Black Hat USA 2019.

Episode 3 of the podcast is now live. This week, host Anna Brading is joined by Paul Ducklin, Mark Stockley and Ben Jones.

The alleged, now indicted ringleader paid more than $1m in bribes to insiders who planted malware and hardware for remote unlocking.

Some user data, such as country and device type, was exposed to some advertisers for over a year.

Transparency rules, but taking the right amount of time to figure out what happened will go a long way toward setting the record straight.

Businesses running any of Cisco’s 220 Series Smart Switches have some urgent patching work on their hands.

Check Point security researchers demonstrate how a dangerous security weakness in the messaging application can be abused to spread fake news and carry out online scams.

New research shows that criminals are evolving ransomware attacks against servers, network hosts, and IaaS cloud assets in search of bigger payoffs from businesses.

An ongoing campaign is hosting its phishing landing pages on enterprise-class public cloud storage services — a nascent trend meant to throw defenders off.

A pair of reports released at Black Hat mark the huge shift away from targeting consumers.

FaceApp has an unprecedented level of access to data from 150 million users. What could its endgame be? We unpack three potential risks.

Assets used as part of phishing campaigns are being hosted on AWS, with heavy XOR obfuscation to limit detection, according to a Proofpoint report.

Cybercriminals are increasingly targeting businesses with ransomware instead of consumers for a bigger payout, according to Malwarebytes.

You might not think your phone is as exposed as an internet server – but it’s handling plenty of untrusted data from unknown sources!