Hacker Stephanie "Snow" Carruthers and her team found phishing emails written by security researchers saw a 3% better click rate than phishing emails written by ChatGPT.

Hundreds of millions of users of Grammarly, Vidio, and the Indonesian e-commerce giant Bukalapak are at risk for financial fraud and credential theft due to OAuth misfires — and other online services likely have the same problems.

Cybercriminals already operate across borders. Nations must do the same to protect their critical infrastructure, people, and technology from threats foreign and domestic.

National response team attributes reduction to a cyber workforce with better training.

Creating a new regulatory framework to better secure Oman's banking system against future attacks.

Zatik takes a fractional approach to AppSec leadership to help small firms access the expertise they need to build secure-by-design software.

PRESS RELEASE

The vulnerabilities, one of which was rated critical and one of which was rated highly severe, affect Cisco IOS XE software.

PRESS RELEASE

PRESS RELEASE

Organizations should focus on four key areas to advance employee education and "cyber smartness."

Cyber threats on satellite technology will persist and evolve. We need a comprehensive cybersecurity framework to protect them from attackers.

A campaign targeting European governmental organizations and a think tank shows consistency from the low-profile threat group, which has ties to Belarus and Russia.

We have too much cybersecurity awareness. It's time to implement repeatable, real-world practice that ingrains positive habits and security behaviors.

The YoroTrooper group claims to be from Azerbaijan and even routes its phishing traffic through the former Soviet republic.

VMware vCenter Servers need immediate patch against critical RCE bug as race against threat actors begins.

In the race over Citrix's latest vulnerability, the bad guys have a huge head start, with broad implications for businesses and critical infrastructure providers worldwide.