The Five Eyes nations have released a joint cybersecurity advisory[1] warning of increased malicious attacks[2] from Russian state-sponsored actors and criminal groups targeting critical infrastructure …

Google Project Zero called 2021 a “record year for in-the-wild 0-days,” as 58 security vulnerabilities[1] were detected and disclosed during the course of the year. …

Are you a CISO, CIO, or IT Director? In your role, you’re responsible for breach protection – which means you oversee and govern the process …

Details have emerged about a now-patched security vulnerability in the Snort intrusion detection and prevention system that could trigger a denial-of-service (DoS) condition and render …

Identity and access management provider Okta on Tuesday said it concluded its probe into the breach[1] of a third-party vendor in late January 2022 by …

A security flaw in the Windows Print Spooler component that was patched by Microsoft in February is being actively exploited in the wild, the U.S. …

Three high-impact Unified Extensible Firmware Interface (UEFI) security vulnerabilities have been discovered impacting various Lenovo consumer laptop models, enabling malicious actors to deploy and execute …

A previously unknown zero-click exploit in Apple’s iMessage was used to install mercenary spyware from NSO Group[1] and Candiru[2] against at least 65 individuals as …

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), along with the Federal Bureau of Investigation (FBI) and the Treasury Department, warned of a new set …

GitHub on Monday noted that it had notified all victims of an attack campaign, which involved an unauthorized party downloading private repository contents by taking …