The Cybersecurity and Infrastructure Security Agency (CISA) publishes a draft document mandating a vulnerability disclosure policy and a strategy for handling reports of security weaknesses.

Updates to pen-testing platform are designed to improve performance and user interface, says Offensive Security, maintainer of the open source project.

“forbesbusinessinsider.com?” Names like that sound close enough to real news domains to pass, but bots are the only ones visiting.

The spyware gave complete control of victimized computers, sold for as little as$25, and was bought by 14,500 hackers worldwide.

A hacker is ransoming account data stolen from music streaming service Mixcloud, according to reports.

Researchers at VpnMentor claim that the TrueDialog data leak exposure could have compromised tens of millions of people.

The flaw can allow hackers to take over typical device functions like sending messages and taking photos because users think malicious activity is a mobile app they use regularly.

It’s important for businesses of all sizes to not only view their suppliers’ attack surface as their own but also extend some of their security protections.

Labeled "StrandHogg," the vulnerability discovered by the mobile security vendor Promon could give hackers access to users' photos, contacts, phone logs, and more.