The folks tasked with defending the Black Hat conference network see a lot of weird, sometimes hostile activity, and this year it included malware linked

Our phones store a lot of personal data, including contacts, social media account details, and bank account logins. We use our smartphones for everything under

Block – the digital payments giant formerly known as Square – faces allegations it failed to take adequate measures to protect customers’ personal information. A

Tens of thousands of internet-facing IP cameras made by China-based Hikvision remain unpatched and exploitable despite a fix being issued for a critical security bug

VMware has admitted an update on some versions of its Carbon Black endpoint solution is responsible for BSODs and boot loops on Windows machines after

VMware has admitted an update on some versions of its Carbon Black endpoint solution is responsible for BSODs and boot loops on Windows machines after

Users of popular streaming and media organizing service Plex are waking up to an unpleasant email this morning saying, in the words of a Reg

Today, we publish our annual Impact Report. In our 2021 report, we highlight initiatives and share stories about our progress in creating a more inclusive

Lloyd’s of London insurance policies will stop covering losses from certain nation-state cyber attacks and those that happen during wars, beginning in seven months’ time.

Twitter’s former security chief Peiter “Mudge” Zatko accused the company and its board of directors of violating financial rules, of fraud, and of grossly neglecting

An Israeli security researcher known for foiling air gap security measures has published a reminder of just how vulnerable the approaches are to both visual

Microsoft has described a severe ChromeOS security vulnerability that one of its researchers reported to Google in late April. The bug was promptly fixed and,

Organizations that didn’t immediately patch their Zimbra email systems should assume miscreants have already found and exploited the bugs, and should start hunting for malicious

Novant Health confirmed that it may have disclosed 1.3 million patients’ sensitive data, including email addresses, phone numbers, financial information – even doctor’s appointment details

Criminals are slipping phishing emails past automated security scanners inside Amazon Web Services (AWS) to establish a launching pad for attacks. Scammers have latched onto

Boffins at universities in France, Germany, Luxembourg, and Sweden took a deep dive into known Java deserialization vulnerabilities, and have now resurfaced with their findings.

The LockBit ransomware group last week claimed responsibility for an attack on cybersecurity vendor in June. The high-profile gang is now apparently under a distributed

In brief Zoom fixed a pair of privilege escalation vulnerabilities, which were detailed at the Black Hat conference this month, but that patch was bypassed,