An NTLM hash disclosure spoofing vulnerability that leaks hashes with minimal user interaction has been observed being exploited in the wild

Bipartisan support grows in Congress to extend Cybersecurity Information Sharing Act for 10 years

Discover Veracode pricing models. Explore pricing options, features, and value-packed solutions to secure your business in 2025.

Discover Rapid7 pricing models. Explore pricing options, features, and value-packed solutions to secure your business in 2025.

Learn how to detect and stop ransomware attacks and why a strong ransomware response plan is critical for recovery.

Ransomware attacks follow a predictable playbook. The only question is whether your business is ready to respond or left scrambling.

Around the world, governments are setting higher-bar regulations with clear corporate accountability for breaches on the belief organizations won't drive up security maturity for operational technology unless they're made to.

After a 180% rise in last year’s report, the exploitation of vulnerabilities continues to grow, now accounting for 20% of all breaches

In the latest "Secure Future Initiative" progress report, Microsoft describes efforts to rebuild its security culture, including making security a core priority for employees during performance reviews and launching a new Secure by Design UX Toolkit.

The FBI found that cybercrime losses climbed by 33% compared to 2023, driven by tactics like investment fraud and BEC

Malware-free attacks are a growing risk – what can businesses do to mitigate them?

ClickFix is being used to target think tanks, government, and defense firms

In the latest "Secure Future Initiative" progress report, Microsoft describes efforts to rebuild its security culture, including making security a core priority for employees during performance reviews and launching a new Secure by Design UX Toolkit.

Secureworks research shows two ransomware operators offering multiple business models with ransomware-as-a-service, mimicking the structures and processes of legitimate businesses.

M&S has launched an investigation and said some customer operations are impacted.

Use of synthetic identities by malicious employment candidates is yet another way state-sponsored actors are trying to game the hiring process and infiltrate Western organizations.

Attackers are using credentials stolen via phishing websites that purport to be legitimate securities company homepages, duping victims and selling their stocks before they realize they've been hacked.