Developer security in a financial services institution

The first point of contact for security-related questions

Make it harder for attackers to exploit vulnerabilities

How security teams can engage developers in security programs

Threat actors continue to innovate their TTPs relentlessly, here's five key areas the security channel needs to be aware of to help their customers stay protected

Traditional practices are no longer sufficient in today's threat landscape. It's time for cybersecurity professionals to rethink their approach.

Ransomware attacks on local and state governments have dropped by over 50% in 2024. What's behind this change, and what new threats are on the horizon?

Internet Archive founder confirmed the allegedly exposed data was “safe”

Microsoft urges macOS users to apply a fix for the vulnerability, which it believes may be under active exploitation by the Adload malware family

Most developers have adopted AI assistants to help with coding and improve code output, but most create more vulnerabilities that take longer to remediate.

Microsoft researchers toyed with app permissions to uncover CVE-2024-44133, using it to access sensitive user data. Adware merchants may have as well.

Adoption of the email authentication and policy specification remains low, and only about a tenth of DMARC-enabled domains enforce policies. Everyone is waiting for major email providers to get strict.

The security firm is denying an assessment that its systems were compromised in Israel by pro-Palestinian cyberattackers, but acknowledged an attack on one of its partners.

A survey shows three-quarters of CISOs are drowning in threat detections put out by a sprawling stack of tools, yet still lack the basic visibility necessary to identify breaches.

Discover how to legally, securely, and quickly fax a check whether you're using a traditional fax machine or an online faxing service.

Microsoft has admitted to a significant lapse in its cloud security logging, leaving customers vulnerable to undetected intrusions for over two weeks. A bug in the company’s internal monitori…

The average time it takes bad actors to weaponize a vulnerability before or after a patch is released shrank from 63 days in 2018-2019 to a mere five days last year

A threat actor called “IntelBroker” posted an advertisement on a dark web forum for the sale of information stolen from Cisco. The actor claimed that the data from this breach contains …