In a coffee-shop scenario, attackers can hijack "secure" VPN sessions of those working remotely, injecting data into their TCP streams.

Passwordless authentication advocates see 2020 as a potential turning point year for the technology. But can the industry get off the dime?

The program for collecting telephone call metadata has faced increased scrutiny and restrictions since Edward Snowden revealed its existence in 2013.

The attack struck CyrusOne's managed services division and compromised six customers primarily serviced by a New York data center.

In this past week, the authorities have cracked down on various BEC scams and cybercrime gangs.

Authorities say they have halted over 600 domestic money mules – exceeding the 400 money mules stopped last year.

The new tool will provide IT departments with system-wide visibility of all the patches needed.

Security experts say most voting machines are safe and secure, but disinformation campaigns on platforms like Facebook and Twitter need to be addressed.

Money meant to fund an Israeli startup wound up directly deposited to the scammers.

Most counties are not protected from impersonation-based spearphishing attacks.

Get up to date with the hot security stories from the past week – from fake Android apps to malware targeting Mac users.

Know where Maksim “Aqua” Yakubets is? Can you pry him out of Russia and his Lamborghinis? The biggest ever cybercrook reward awaits!

Facebook says the company used celeb bait links to infect victims with malware and hijacked their ad accounts to sell diet pills.

In an embarrassing twist, bug bounty platform HackerOne has paid a $20,000 reward to a researcher who reported a security flaw inadvertently caused by one of its staff during… a bug submission.

Researchers have discovered a flaw in macOS, Linux, and several other operating systems that could let attackers hijack VPN connections.

No longer can you secure the perimeter and trust that nothing will get in or out.