Understanding and preparing for the potential long-tail costs of data breaches is crucial for businesses that aim to mitigate the impact of security incidents

The last few months have brought even more opportunities for NIST to engage with our international partners to enhance cybersecurity. Here are so

LockBit has added the US Federal Reserve to its leak site, claiming to have stolen 33TB of data, but some security experts aren’t convinced

Threat actors are seeking an $8 million ransom after taking down government systems

CDK Global, a tech company supplying car dealers across North America, was breached after temporarily restoring systems impacted by a cyber attack

WatchGuard whitepaper - Demystifying NIS 2 requirements

Wells Fargo is by no means the first company to crack down on mouse jigglers

Deepfake scams are surging, according to new research, as cyber criminals target c-suite figures

New Zscaler integrations across Chrome Enterprise, Google Workspace, and Google Security Operations aim to enhance enterprise security and access

Those impacted by the Change Healthcare attack will be contacted and given advice on how to protect themselves

The China-nexus cyber-threat actor has been operating since at least 2019, and has notched victims in multiple countries.

The high-severity CVE-2024-5806 allows cyberattackers to authenticate to the file-transfer platform as any valid user, with accompanying privileges.

More than 200 regional and national government agencies have been impacted by the ransomware attack and few of them are once again operational.

An unknown adversary compromised a CISA app containing the data via a vulnerability in the Ivanti Connect Secure appliance this January.

Injected malicious JavaScript code gives attackers administrator rights on websites, and fills sites with SEO spam.

Knowledge institutions with legacy infrastructure, limited resources, and digitized intellectual property must protect themselves from sophisticated and destructive cyberattacks.

For a while, the botnet spread but did essentially nothing. All the malicious payloads came well after.

In the latest breaches, threat groups compromised telecommunications firms in at least two Asian nations, installing backdoors and possibly eavesdropping or pre-positioning for a future attack.

Operations at 15,000 automotive dealers remain impacted as CDK works on restoring its cloud offerings after an apparent ransomware attack last week.

AppSec is hard for traditional software development, let alone citizen developers. So how did two people resolve 70,000 vulnerabilities in three months?