Most exploitable vulnerabilities go unresolved, according to new research

The US and Europe show the strongest growth, but spending is on the up all round the world

A new infostealer on the market is making big waves globally, replacing Lumma et al. in attacks and employing so many stealth, persistence, and anti-analysis tricks that it's downright difficult to count them all.

Some of the brightest minds in the industry will discuss how to strengthen cloud security.

DigitalOcean executives describe how they automated and streamlined many of the identity and access management functions that had been previously handled manually.

A threat actor has claimed responsibility for the alleged politically motivated attack and has uploaded the stolen data to a Dark Web forum.

Learn how to use LastPass to manage your passwords securely. Follow this step-by-step guide to enhance your online security with ease.

Flaw in SureTriggers plugin allows unauthenticated users to create admin accounts on WordPress sites

Through the SYS Initiative, Prodaft is offering a secure, anonymous channel for individuals to share information about ongoing cybercrime activities

ResolverRAT targets healthcare organizations using advanced evasion techniques and social engineering

The US government has implemented a program that applies export controls on data transactions to certain countries of concern, including China and Russia

CA/Browser Forum members have voted in favor of shortening TLS/SSL certificate lifespans to 47 days

Experts have warned that threat actors could hijack AI hallucinations in “slopsquatting” attacks

Cyble investigates the DOGE BIG BALLS Ransomware, analyzing its operation and the false ties made to Edward Coristine.

Blind spots in network visibility, including in firewalls, IoT devices, and the cloud, are being exploited by Chinese state-backed threat actors with increasing success, according to new threat intelligence. Here's how experts say you can get eyes on it all.

A threat actor posted about the zero-day exploit on the same day that Fortinet published a warning about known vulnerabilities under active exploitation.