It's been two years since Executive Order 14028. By using SBOMs as a standard, organizations can manage software risks, protect their reputation, and improve their cybersecurity posture.

In an already fraught environment surrounding the popular Python programming language software package manager, hackers are coming up with new ways to sneak malicious goodies past cybersecurity buffers.

No activity logging in the free subscription for Google's Web-based productivity suite exposes enterprises to insider and other threats, researchers say.

The "missed package" phishing messages, likely the work of a hacking-for-hire group, bounds into inboxes, bearing ASyncRAT.

When it comes to tool consolidation, focus on platforms over products.

An audit uncovers an API-related security vulnerability dating back to Jetpack version 2.0 released in 2012 — and it affects millions of websites.

The global e-commerce company will pay millions of dollars in two separate lawsuits because of privacy and security violations, the FTC says.

Enables financial services firm to operationalize MITRE ATT&CK with Splunk and eliminate detection coverage gaps based on organizational risk and priorities.

Program designed to equip women and underrepresented individuals with the necessary skills and knowledge to succeed in cybersecurity.

The newly-discovered Horabot botnet has attacked companies in the accounting, investment, and construction sectors in particular

It's currently unclear who is behind the spyware attack on the Russian-based cyber security firm