GCHQ chief warns China's cyber actions threaten global internet security, while Russia and Iran pose immediate risks

Infosecurity Europe research highlights significant challenges faced by organisations in staying up to speed with increasing compliance requirements

The 15-year-old Ebury botnet is more active than ever, as ESET found 400,000 Linux servers compromised for cryptocurrency theft and financial gain

The guide is designed to provide high-risk communities with actionable steps to bolster their cybersecurity defenses

Several software security experts have told Infosecurity that no new vulnerabilities have been added to the US NVD since May 9

Authored by Vignesh Dhatchanamoorthy, Rachana S Instagram, with its vast user base and dynamic platform, has become a hotbed for scams and fraudulent

Exploit code is circulating for CVE-2024-4761, disclosed less than a week after a similar security vulnerability was disclosed as being used in the wild.

Comparitech said 2023 was a record year for breaches with 954 reported, up from 139 in 2022 and 783 in 2021

Explore Cyble's insights on the Babylon RAT campaign targeting Malaysian politicians and government officials through malicious ISO files.

We've revisited the best CSPM tools for 2024, comparing updated features, pricing, and integrations to help secure your cloud environments effectively.

In this day and age, everyone needs to protect themselves against various cyber threats. For key members of civil society, CISA has released a High-Risk Communities Protection (HRCP) report to provide intel and guidance.

The nation amends its Cybersecurity Act, giving its primary cybersecurity agency more power to regulate critical infrastructure and third parties, and requiring cyber incidents be reported.

CVE-2024-30051 is the most concerning out of this month's Patch Tuesday offerings, and is already under active exploit by several QakBot actors.

While the protocol has made passwordless authentication a reality, token-binding is key to prevent against token theft and reuse, security vendor says.

Scattered Spider is as active as ever, despite authorities claiming that they're close to nailing its members.

Key management is more complex than ever. Your choices are to rely on your cloud provider or manage keys locally, encrypt only the most critical data, or encrypt everything.

Microsoft today released updates to fix more than 60 security holes in Windows computers and supported software, including two "zero-day" vulnerabilities in Windows that are already being exploited in active attacks. There are also important security patches…

This report summarizes notable activities of selected advanced persistent threat (APT) groups that were documented by ESET researchers from October 2023 until the end of March 2024.

One of the most advanced server-side malware campaigns is still growing, with hundreds of thousands of compromised servers, and it has diversified to include credit card and cryptocurrency theft.