Access Now announced that the US Customs and Border Protection agency released records on its app following the NGO’s lawsuit

A new Sonatype report reveals a 156% surge in open source malware, with over 704,102 malicious packages identified since 2019, as OSS adoption continues to skyrocket

Russian-backed APT29 has been spying on US and European organizations since at least 2021, a US-UK joint advisory said

Threat detection tools yield too many false positives, security pros say, leading to burnout and resentment.

Companies are putting "AI" in just about all of their products, which opens up new security holes. LLM SecOps and ML SecOps are becoming must-have skills.

Internet Archive digital collections appear safe after the attacks, which raised website security questions even as the attackers faced criticism.

ESET research dives deep into a series of attacks that leveraged bespoke toolsets to compromise air-gapped systems belonging to governmental and diplomatic entities

Cyble’s Vulnerability Intelligence unit has detected cyberattacks on the Ruby SAML library, D-Link NAS devices, the aiohttp framework, and more.

Sophos claims that a lack of cybersecurity talent is considered a major risk by SMBs

The US DoD has finalized the Cybersecurity Maturity Model Certification (CMMC) Program, which defense contractors must pass to bid for government contracts

Personal data of over 2600 employees has been exposed and insider information about the Switch 2 and future Pokémon games leaked

Japanese electronics firm Casio has reported a ransomware attack and data breach

Discover how the ErrorFather campaign deploys the undetected Cerberus Android Banking Trojan to target users. Learn about its sophisticated infection chain, malicious capabilities, and the ongoing cyber threats posed by repurposed malware

Phishing is evolving beyond email as advances such as AI drive targeted attacks – leaders must keep up with the latest tactics to mount an effective defense