'Big Bang' group returns with new campaign after last year's RAT attacks.

An exhaustive scan shows hundreds of thousands of websites potentially exposing sensitive data such as database passwords, API keys and so on.

These methods may not yet be on your security team's radar, but given their impact, they should be.

The newest version of TLS won't break everything in your security infrastructure, but you do need to be prepared for the changes it brings.

The fact that the app likely has been exfiltrating data for years is rather f#@&'d up, says the security researcher who reported the issue to Apple one month ago.

Spreading via fake Android apps, the malware lifts a range of sensitive information from victims’ devices.

Trusted execution environments are said to provide a hardware-protected enclave that runs software and cannot be accessed externally, but recent developments show they fall far short.

NIST and DHS project publishes first draft of new BGP Route Origin Validation (ROV) standard that will help ISPs and cloud providers protect against BGP hijack attacks.

If the Assistance and Access Bill becomes law as it stands, it could affect 'every website that is accessible from Australia' with relatively few constraints in the government's powers.

Updated: Patches applied to a vulnerability in ProtonVPN and NordVPN builds led to the discovery of separate bugs which had to be resolved quickly in recent updates.

From Google buying Mastercard card records and Google warning users of FBI snooping to Chrome making it harder to use Flash, and more!

The IoT botnets are back with a new arsenal containing a vast array of vulnerabilities.

The National Academy of Sciences says the US election system uses insecure technology and is fighting off attempts to destabilize it.

Chrome will now generate a unique password for users as a part of the everyday credential creation process.

Initial Coin Offerings (ICOs) are part of the cryptocurrency Wild West, but how do you know what is fraudulent and what is legitimate?

Initial Coin Offerings (ICOs) are part of the cryptocurrency Wild West, but how do you know what is fake and what is legitimate?

New malware persistence method works only on Windows 10 and abuses built-in UWP apps like the Cortana and People apps.

Park Jin Hyok is allegedly with Lazarus Group, a hacking team connected to attacks on a wide array of industries and public utilities.