Though already patched, the vulnerability is especially problematic because of the highly privileged access it offers to business-critical systems, sensitive data, and backups for attackers.

Researchers at security vendor Cleafy detailed a malware known as "SuperCard X" that uses the NFC reader on a victim's own phone to steal credit card funds instantly.

More than a third of web attacks target APIs as AI expands attack surfaces and brings new security challenges

M&S customers have been warned to remain vigilant for phishing scams capitalizing on the incident

Powered by Cisco XDR, the new offering will enable partners to tap into new revenue streams, the company said

As CISA delivered an eleventh-hour reprieve for the CVE database, AWS reportedly began to pause some data center leases

Highly personal data was accessed after Yale New Haven Health was hacked earlier this year

A survey reveals that most attacks go unreported, putting patient data at risk

By focusing on prevention, education, and risk transfer through insurance, organizations — especially SMEs — can protect themselves from the rapidly escalating threats of cyberattacks.

Two kinds of attacks are in high gear: ransomware attacks against OEMs and compromised electric vehicle chargers, according to data from Q1 2025.

Recently added artificial intelligence capabilities on the Chinese-language Darcula phishing-as-a-service platform make phishing attacks easy for even the least technical hackers.

Mandiant, which was acquired by Google Cloud in 2022, paints a picture of global cyber threats from last year in order to help readers be better prepared this year.

OpenAI’s possible restructuring to a for-profit model is receiving pushback from former staff, Nobel Laureates, and AI pioneers.

Increased law enforcement pressure has forced ransomware groups like DragonForce and Anubis to move away from traditional affiliate models

A maximum severity flaw affecting SAP NetWeaver has been exploited by threat actors

British retailer M&S continues to tackle a cyber incident with online orders now paused for customers