As the DigiCert drama continues, we now have a better idea of the size and scope of the problem – with the organization’s infosec boss

Dozens of Russia-affiliated criminals are right now trying to wrest control of web domains by exploiting weak DNS services. The crooks have already hijacked an

Google says it’s enhancing the security of sensitive data managed by Chrome for Windows users to fight the scourge of infostealer malware targeting cookies. When

Sponsored Post The dawn of artificial intelligence is upon us, but its development has only just begun. Research suggests there will be just 250m users

Do you have problems configuring Microsoft’s Defender? You might not be alone: Microsoft admitted that whatever it’s using for its defensive implementation exacerbated yesterday’s Azure

Business Security Many smaller organizations are turning to cyber risk insurance, both to protect against the cost of a cyber incident and to use the

The UK’s Electoral Commission has received a formal slap on the wrist for a litany of security failings that led to the theft of personal

DigiCert has given some unlucky customers 24 hours to replace their SSL/TLS security certificates it previously issued them – due to a five-year-old blunder in

Delta Air Lines lost hundreds of millions of dollars due to the CrowdStrike outage earlier this month – and it has hired a high-powered law

Insight The developers of EvilProxy – a phishing kit dubbed the “LockBit of phishing” – have produced guides on using legitimate Cloudflare services to disguise

Do you have your VMware ESXi hypervisor joined to Active Directory? Well, the latest news from Microsoft serves as a reminder that you might not

ESET Research ESET researchers detected multiple, widespread phishing campaigns targeting SMBs in Poland during May 2024, distributing various malware families Jakub Kaloč 30 Jul 2024

A huge phishing campaign exploited a security blind-spot in Proofpoint’s email filtering systems to send an average of three million “perfectly spoofed” messages a day

Legislation for an internet “kill switch” will reach Malaysia’s Parliament in October, according to the country’s minister for Law and Institutional Reform. Minister Azalina Othman

Meta’s machine-learning model for detecting prompt injection attacks – special prompts to make neural networks behave inappropriately – is itself vulnerable to, you guessed it,

Updated Microsoft has vowed to reduce cybersecurity vendors’ reliance on kernel-mode code, which was at the heart of the CrowdStrike super-snafu this month. Redmond shared

US border agents must obtain a warrant, in New York at least, to search anyone’s phone and other electronic device when traveling in or out

Microsoft has admitted that its estimate of 8.5 million machines crashed by CrowdStrike’s faulty software update was based on incomplete data and vowed to reduce