Attackers linked to the Russian government are exploiting unpatched vulnerabilities, say UK and US security agencies

Research from Blackberry suggests that overconfidence and a lack of visibility are leaving healthcare, education, and government organizations exposed

Deploy servers with a secure approach

The hotel giant will be held to higher security standards in a series of proposed requirements, including implementing a new annually reviewed security program.

The future of cybersecurity will be shaped by how well we manage the explosion of NHIs.

CISOs in consumer and retail organizations appear to accept greater risks to allow for more innovation, which could be a model for future growth.

Investigation of the use-after-free vulnerability is ongoing, but users can update the Firefox browser now for a fix.

Creating new accounts under fake identities provides attackers with a way to launder money or commit fraud.

The Internet Archive, a non-profit digital library best known for its Wayback Machine, has disclosed a major data breach affecting over 31 million users.

A recent report has revealed errant cybersecurity behaviours in Australia, including employees sharing company data with AI tools.

Businesses struggle with data management for AI, turning to GRC frameworks to manage risks and ensure compliance.

ESET Research shares new findings about Telekopye, a scam toolkit used to defraud people on online marketplaces, and newly on accommodation booking platforms.

NHS England has issued an alert regarding a critical Veeam Backup & Replication vulnerability that is being actively exploited, potentially leading to remote code execution

Access Now announced that the US Customs and Border Protection agency released records on its app following the NGO’s lawsuit

A new Sonatype report reveals a 156% surge in open source malware, with over 704,102 malicious packages identified since 2019, as OSS adoption continues to skyrocket

Russian-backed APT29 has been spying on US and European organizations since at least 2021, a US-UK joint advisory said

Threat detection tools yield too many false positives, security pros say, leading to burnout and resentment.

Companies are putting "AI" in just about all of their products, which opens up new security holes. LLM SecOps and ML SecOps are becoming must-have skills.