CISA launched a new software vulnerability enrichment program to fill the gap left by NIST’s National Vulnerability Database backlog

Researchers from Carnegie Mellon University have shared an overview of their new AI Security Incident Response Team (AISIRT)

Authored by Yashvi Shah and Preksha Saxena AsyncRAT, also known as "Asynchronous Remote Access Trojan," represents a highly sophisticated malware variant

The research shows a significant drop in the number of tech CISOs that got a base salary increase in the past year — roughly 18% year over year.

Experts at the RSA Conference discussed how governments, the open-source community and end users can work together to drastically improve the security of open-source software

Iran follows in Russia's disinformation footsteps but with a different, more economical, and potentially higher-impact model.

An attacker accessed personal information of over 225,000 active, reserve, and former UK military members from third-party payroll processing system.

Infosec pros are urged to get serious about data access control and automation to thwart AI breaches

Exec urges infosec bods to adopt next-gen SIEM driven by AI – or risk being outpaced by criminals

Researchers discover 75,000+ domains hosting fraudulent e-commerce sites, in a campaign dubbed BogusBazaar

In many ways, data has become the primary currency of modern organizations. It doesn’t matter whether you are a large business enterprise, SMB, government

As threat actors begin to use malicious chatbots, hackbot as a service groups are helping affiliates launch tailored attacks via subscription

Major software manufacturers pledge to a voluntary framework aimed at boosting cyber resilience of customers across the US

Researchers discover large-scale Russian influence operation using GenAI to influence voters

I joined NIST as the first full-time manager of the NICE Framework in October 2020, just one short month before NICE published the fi