Attack vectors disclosed last year are still fully exploitable, researchers demoed at Black Hat USA 2019.

Episode 3 of the podcast is now live. This week, host Anna Brading is joined by Paul Ducklin, Mark Stockley and Ben Jones.

The alleged, now indicted ringleader paid more than $1m in bribes to insiders who planted malware and hardware for remote unlocking.

Some user data, such as country and device type, was exposed to some advertisers for over a year.

Transparency rules, but taking the right amount of time to figure out what happened will go a long way toward setting the record straight.

Businesses running any of Cisco’s 220 Series Smart Switches have some urgent patching work on their hands.

Check Point security researchers demonstrate how a dangerous security weakness in the messaging application can be abused to spread fake news and carry out online scams.

New research shows that criminals are evolving ransomware attacks against servers, network hosts, and IaaS cloud assets in search of bigger payoffs from businesses.

An ongoing campaign is hosting its phishing landing pages on enterprise-class public cloud storage services — a nascent trend meant to throw defenders off.

A pair of reports released at Black Hat mark the huge shift away from targeting consumers.

FaceApp has an unprecedented level of access to data from 150 million users. What could its endgame be? We unpack three potential risks.

Assets used as part of phishing campaigns are being hosted on AWS, with heavy XOR obfuscation to limit detection, according to a Proofpoint report.

Cybercriminals are increasingly targeting businesses with ransomware instead of consumers for a bigger payout, according to Malwarebytes.

You might not think your phone is as exposed as an internet server – but it’s handling plenty of untrusted data from unknown sources!

Researchers were able to bypass Apple's FaceID using a pair of glasses with tape on the lenses.

The closed-source, opaque operation of network equipment makes spying accusations difficult to disprove. This could be solved by opening the software stack, but Huawei CSO Andy Purdy disagrees.

Researchers at Black Hat USA reveal how security authentication weaknesses in popular Siemens ICS family let them control a PLC.

The vulnerability is a decade old with a public exploit, yet remained unpatched in one of the phone giant's most popular models.

Hardware, software, services and people make up supply-chain risk — but the latter should be the guiding focus.

The insurance giant serves at least 83 million U.S. households.