What are the best GRC tools and how much do they cost? Use our guide to compare pricing and features of our recommended GRC platforms.

A joint government advisory warned that the Chinese state-sponsored actor APT40 is capable of immediately exploiting newly public vulnerabilities in widely used software

Researchers at Avast found a flaw in the cryptographic schema of the DoNex ransomware and have been sending out decryptor keys to victims since March 2024

The exploitation of vulnerabilities in Ivanti's software underscores the need for robust cybersecurity measures and proactive response strategies to mitigate risks and protect critical assets.

The past ten years have seen monumental shifts in the cyberattack landscape. Here are some of the largest trends and their lasting implications.

Group-IB also revealed the ransomware uses Chacha20 and RSA-OAEP for encryption

Swiftly respond to security breaches with our customizable Incident Response Plan template. Minimize downtime and reputational damage with a tailored approach.

The campaign, which distributes dozens of malicious jQuery variants across npm, GitHub, and jsDelivr, appears to be a manual effort, and lacks the typical pattern that characterizes similar, related attacks.

In a statement on Monday, Evolve confirmed the breach includes over 20,000 customers in Maine

The more sensitive data an organization collects, the more at risk it is to a cyberattack. Here's how to limit the damage.

Software-as-a-service company Command Zero launches with a platform for investigating cybersecurity incidents that aims to minimize the grunt work.

In all, the company released fixes for a whopping 139 CVEs in its own products and four for non-Microsoft products.

Though the company reassures its users that customer funds were not accessed, the same cannot be said for customer information.

The state-sponsored threat group is capable of exploiting fresh software vulnerabilities within hours of their initial discovery.

The ransomware-as-a-service platform just rolled off the assembly line, also targets Windows, and uses Golang for cross-platform capabilities.

Microsoft Corp. today issued software updates to plug 139 security holes in various flavors of Windows and other Microsoft products. Redmond says attackers are already exploiting at least two of the vulnerabilities in active attacks against Windows users.