The fact that the app likely has been exfiltrating data for years is rather f#@&'d up, says the security researcher who reported the issue to Apple one month ago.

Spreading via fake Android apps, the malware lifts a range of sensitive information from victims’ devices.

Trusted execution environments are said to provide a hardware-protected enclave that runs software and cannot be accessed externally, but recent developments show they fall far short.

NIST and DHS project publishes first draft of new BGP Route Origin Validation (ROV) standard that will help ISPs and cloud providers protect against BGP hijack attacks.

If the Assistance and Access Bill becomes law as it stands, it could affect 'every website that is accessible from Australia' with relatively few constraints in the government's powers.

Updated: Patches applied to a vulnerability in ProtonVPN and NordVPN builds led to the discovery of separate bugs which had to be resolved quickly in recent updates.

From Google buying Mastercard card records and Google warning users of FBI snooping to Chrome making it harder to use Flash, and more!

The IoT botnets are back with a new arsenal containing a vast array of vulnerabilities.

The National Academy of Sciences says the US election system uses insecure technology and is fighting off attempts to destabilize it.

Chrome will now generate a unique password for users as a part of the everyday credential creation process.

Initial Coin Offerings (ICOs) are part of the cryptocurrency Wild West, but how do you know what is fraudulent and what is legitimate?

Initial Coin Offerings (ICOs) are part of the cryptocurrency Wild West, but how do you know what is fake and what is legitimate?

New malware persistence method works only on Windows 10 and abuses built-in UWP apps like the Cortana and People apps.

Park Jin Hyok is allegedly with Lazarus Group, a hacking team connected to attacks on a wide array of industries and public utilities.

Researchers have sounded a warning about the security of Baseboard Management Controllers (BMCs) – a critical component that datacentres depend on to manage servers.

Apple is planning to create an online portal that will allow law enforcement officials around the world to request information about its users more easily.

Cybersecurity programs have drastically improved since 2017, according to a recent DomainTools survey. Here's how you can improve your cybersecurity GPA.

The hacking group is covertly infecting Windows machines with Trojans by way of stolen certificates belonging to a Chinese security company.

A company that sells exploits to government agencies drops Tor Browser zero-day on Twitter after recent Tor Browser update renders exploit less valuable.

One of the most highly touted breakthroughs of the iPhone X -- and soon to be the iPhone XS -- is also its biggest drawback in usability and productivity.

By implementing the “Equifax bug,” it’s the first known time a Mirai IoT botnet variant has targeted an Apache Struts vulnerability.