Researchers find that a spoofing a service message from the phone carrier is simple and effective on some brands of Android smartphones.

Many privacy advocates, including the FTC's own commissioner, say the FTC's record $170 million fine that it violated COPPA, isn't enough.

Cybercriminals targeting financial institutions in the UK bypassed Symantec email gateway and other perimeter technologies.

The zero-day vulnerability could enable privilege escalation, and is not part of Google's Android September security update.

Researchers had recently demonstrated how attackers could intercept device capability information and use it against 5G mobile subscribers.

Field-Programmable Gate Arrays are flexible, agile-friendly components that populate many infrastructure and IoT devices -- and have recently become the targets of researchers finding vulnerabilities.

Episode 7 of the Naked Security podcast is available now!

Cyber security's comprehensive news site is now an online community for security professionals, outlining cyber threats and the technologies for defending against them.

Server lacked password protection and included multiple databases with records from the U.S., U.K. and Vietnam.

He kept working on new botnets (and swatting a co-conspirator-cum-competitor) while indicted and on supervised release.

When is a security update not a security update? When it’s patching flaws in a version of an OS nobody beyond developers is yet running.

Healthcare organizations should be alarmed by the frequency and severity of cyberattacks. Don't assume you're safe from them just because you're compliant with regulations.

Mozilla has told developers not to fret – it won’t follow Google in tweaking its browser to be unfriendly to ad blocking software.

Got a Pi? Here’s a cool project idea for you…

After being hit by a ransomware attack, Massachusetts city New Bedford faced a payout demand of more than $5 million - one of the latest known ransoms ever.

It's still unclear who owned the server storing hundreds of millions of records online without a password.

A new report investigates the evolution of crimeware, how businesses underestimate the threat, and why they should be concerned.

The team will be tasked with better protecting U.S. IP from data theft; it will also issue and oversee new policies around data rights and how military IP is allocated in the DoD's contracting and acquisition stages.

Faced by increasingly sophisticated threats, organizations are realizing the benefits of automation in their cybersecurity programs.