Recent trends in breaches and attack methods offer a valuable road map to cybersecurity professionals tasked with detecting and preventing the next big thing.

Eight out of nine apps that people use to input Chinese characters into mobile devices have security vulnerabilities that allow a passive eavesdropper to collect keystroke data.

An LLM agent based on OpenAI’s GPT-4 is able to exploit 87% of a list of vulnerabilities when provided with their NIST descriptions.

The payment card industry pushes for more security in financial transactions to help combat increasing fraud in the region.

Dutch semiconductor manufacturer Nexperia has suffered a significant data breach, exposing sensitive information, including intellectual property. The company’s servers were compromised, prom…

Cisco has published the details of a suspected state-sponsored threat campaign leveraging two firewall zero-days to infect government networks

A recent cyberattack on a wastewater treatment plant in Tipton, Indiana, has been claimed by the Cyber Army of Russia Reborn (CARR), a Russian-speaking hacker group. The incident spotlights the ong…

The US Federal Trade Commission will send $5.6m worth of refunds to the spied-on customers of the Amazon-owned home camera company

Coming into force on April 29th, the Product Security and Telecommunications Infrastructure Act aims to tighten up manufacturer security and protect users

Understand what security measures you have in place, what you need to keep secure, and what rules you have to show compliance with.

The targeted operation utilized CVE-2017-8570 as the initial vector and employed a notable custom loader for Cobalt Strike, yet attribution to any known threat actor remains elusive.

CISA’s RVWP program sent 1754 ransomware vulnerability notifications to government and critical infrastructure entities in 2023, leading to 852 devices being secured

By Hewlett Packard Enterprise

Attackers will likely use software bills-of-material (SBOMs) for searching for software potentially vulnerable to specific software flaws.

Data brokers are companies that collect your information from a variety of sources to sell or license it out to other businesses. Before they can pass

Refreshed software and collaboration with the security researcher community may have contributed to the 5% drop.