The exploitation of vulnerabilities in Ivanti's software underscores the need for robust cybersecurity measures and proactive response strategies to mitigate risks and protect critical assets.

The past ten years have seen monumental shifts in the cyberattack landscape. Here are some of the largest trends and their lasting implications.

Group-IB also revealed the ransomware uses Chacha20 and RSA-OAEP for encryption

Swiftly respond to security breaches with our customizable Incident Response Plan template. Minimize downtime and reputational damage with a tailored approach.

The campaign, which distributes dozens of malicious jQuery variants across npm, GitHub, and jsDelivr, appears to be a manual effort, and lacks the typical pattern that characterizes similar, related attacks.

In a statement on Monday, Evolve confirmed the breach includes over 20,000 customers in Maine

The more sensitive data an organization collects, the more at risk it is to a cyberattack. Here's how to limit the damage.

Software-as-a-service company Command Zero launches with a platform for investigating cybersecurity incidents that aims to minimize the grunt work.

In all, the company released fixes for a whopping 139 CVEs in its own products and four for non-Microsoft products.

Though the company reassures its users that customer funds were not accessed, the same cannot be said for customer information.

The state-sponsored threat group is capable of exploiting fresh software vulnerabilities within hours of their initial discovery.

The ransomware-as-a-service platform just rolled off the assembly line, also targets Windows, and uses Golang for cross-platform capabilities.

Microsoft Corp. today issued software updates to plug 139 security holes in various flavors of Windows and other Microsoft products. Redmond says attackers are already exploiting at least two of the vulnerabilities in active attacks against Windows users.

Simple malware and simple TTPs play against a backdrop of complex geopolitical conflicts in the Arab world.

Even the NSA leaves bugs in its software. In this case, it's the kind of cross-site issue that regularly slips past developers.

The passkey support for account authentication within Google's Advanced Protection Program complements existing compatibility with FIDO2 hardware keys.

Recent technological advancements have made people and things more interconnected. Unfortunately, people with malicious intent are also taking advantage

Though cybersecurity is on every executive’s checklist today, most struggle with growing compliance burdens, keeping the costs moderate, and bringing team

When it comes to cyber diplomacy, finding the balance between protection and cooperation is key—and each side offers distinct benefits and drawbacks.