Celebrate Cybersecurity Awareness Month by turning on two-factor authentication and replacing your "fido123" password.

Attack simulation tool will be integrated into ReliaQuest's GreyMatter platform.

Akamai security architect Marc Pardee tells the story of cutting his security teeth as an NSA intern and why all cybersecurity professionals can benefit from learning how to break things.

Some 36% of companies who haven't suffered a breach said it is likely they are unknowingly experiencing one now.

The serial hacker GnosticPlayers is claiming to have ransacked Zynga’s user data – including names, emails and passwords.

This malicious O.MG Lightning cable has come a long way, with extensive work on the kinds of payload it can deliver.

This latest Exim flaw could lead to at least a denial of service crash in the software but also the possibility of remote code execution.

Cyber security's comprehensive news site is now an online community for security professionals, outlining cyber threats and the technologies for defending against them.

The focus on digital transformation and compressing development release cycles is appealing, but that means security can be left behind. How should security practitioners address this challenge?

A new botnet known as MasterMana shows a high level of sophistication with a low cost to execute, according a report from cybersecurity firm Prevailion.

Google's new password checkup tool joins other similar services including Have I Been Pwned and Mozilla's Firefox Monitor.

This week, a former Yahoo employee pleaded guilty to hacking into the email accounts of more than 6,000 users, looking for porn. Companies need to protect themselves from similar security breaches. Here's what to do.

Lure possible attackers into a trap with a Kali Linux honeypot.

Lure possible attackers into a trap with a Kali Linux honeypot.

Think twice before posting about ... grits.

For less than $200, attackers were able to infect thousands of systems, stealing user credentials, cryptocurrency wallets, and web histories, an analysis finds.

Multiyear campaigns stretching back to at least 2014 have been seen using zero-days in region-specific software.

The feature will check the strength of saved passwords and alert users when they're compromised in a breach.

Bad OpSec led to the botnet's discovery — revealing 800,000 victims in Russia.

Quantum computing is real and it's evolving fast. Is the security industry up to the challenge?

An employee - since terminated - at the financial services corporation is being investigated for fraud after accessing and stealing cardholder data.