Microsoft's Diana Kelley explains all that's wrong with our passwords.

Linux powers many of the IoT devices on which we've come to rely -- something that enterprises must address.

A record fine and two new compromises kick off the autumn compromise season.

What should consumers be aware of, and what are some steps they could use to identify credential stuffing threats? Akamai's Andy Ellis offers tips to CNET's Dan Patterson.

Take this short, multiple choice survey and tell us about your company's cyberwarfare experience and cybersecurity strategies for the upcoming year.

Support for PHP 5.6 drops on December 31 - but a recent report found that almost 62 percent of websites are still using version 5.

Media, telecom, and technology firms are far more likely to experience a data breach in the near future than organizations in sectors including energy, construction, and transportation.

A security researcher found a publicly exposed Firebase data repository that was hardcoded in the dating app.

The flaw impacted patients with pacemakers, implantable defibrillators, cardiac resynchronization devices and insertable cardiac monitors.

Ahead of the 2018 midterms, Florida counties targeted by Russian phishing attacks are hardening their networks and increasing cybersecurity training for election officials.

He or she is selling off the databases by state. Kansas’s voter database has already been sold and published, and Oregon is next up for sale.

Researchers concluded that passphrase requirements such as a 15-character minimum length deter the majority users from reusing them on other sites.

José Rodríguez has demonstrated how an attacker with physical access to a device running iOS 12.0.1 can gain access to photos stored on it.

The update also features 23 security fixes.

Thanks to growing economies and new legislation, the Asia-Pacific region is experiencing a shortage of security pros of around 2.15 million.

To succeed, organizations must be empowered to reduce their attack surface and staff overload so they can get more out of their existing firewall and threat intelligence investments.

The vendor only plans to patch two of the eight impacted devices, according to a researcher.

Festivities in India have begun and it’s time for a joyride of celebrations, merriment, lots of tantalising food and exchange of gifts. Talking of food and gifts, the festive season is also a time for ecommerce sites to spring into action, by offering tempting…

A serious bug in libssh could allow crooks to connect to your server – with no password requested or required. Here’s what you need to know.

What are utility and power companies, and federal agencies, doing to ready themselves for potential ransomware attacks? Threatpost discusses.