New NCSC CEO Dr Richard Horne warned in a speech that there is a widening gap between escalating threats and society’s ability to defend against them

The new set of specifications could enable users to securely move passkeys and all other credentials across providers

DigiCert says imminent crypto threat from quantum computing has been over-hyped

New government grants for AI safety research are designed to fund work into deepfakes and other cyber risks

CISA warns of critical vulnerabilities in products like SolarWinds and Firefox, urging immediate action to mitigate risks and enhance cybersecurity.

The adoption of AI in information security, though essential, raises significant ethical concerns around privacy, transparency and the risk of bias.

A new malware loader, PhantomLoader, disguises itself as an antivirus software module to deliver the evasive SSLoad malware, bypassing traditional security measures.

The networking giant says its probe is ongoing amid claims a threat actors accessed company data

As in golf, security requires collaboration across the entire organization, from individual contributors in each department to the executive level and the board.

The long-active, India-sponsored cyber-threat group targeted multiple entities across Asia, Africa, the Middle East, and even Europe in a recent attack wave that demonstrated the use of a previously unknown post-exploit tool called StealerBot.

Safe-U founder and CEO Jorge Litvin explains how to create a common language between the CISO and the rest of the C-suite.

With its questionable privacy policy, slow VPN performance, and lack of independent audits, Urban VPN fails to offer a secure and quality VPN experience.

Learn how data from call detail records can help you find fraud calls made by your phone system — and prevent them from happening again.

Information Security Services, News, Files, Tools, Exploits, Advisories, and Whitepapers

CISA released the third edition of SBOM guidelines to enhance software component transparency

A new Bugcrowd study shows 71% of ethical hackers now see AI boosting hacking value, up from 21% in 2023

Phishing emails claiming to be from Starbucks are offering recipients a

Critical vulnerability CVE-2024-40711 in Veeam Backup exploited for ransomware. Patch released in Sept 2024. Urgent update needed to prevent further attacks.