Cyber security

Microsoft on Thursday disclosed an “extensive series of credential phishing campaigns” that takes advantage of a custom phishing kit that…

The U.S. Cybersecurity and Infrastructure Security Agency on Friday warned of crypto-mining malware embedded in “UAParser.js,” a popular JavaScript NPM…

A new malware campaign targeting Afghanistan and India is exploiting a now-patched, 20-year-old flaw affecting Microsoft Office to deploy an…

An effective cybersecurity strategy can be challenging to implement correctly and often involves many layers of security. Part of a…

The U.S. Commerce Department on Wednesday announced new rules barring the sales of hacking software and equipment to authoritarian regimes…

A newly disclosed vulnerability affecting Intel processors could be abused by an adversary to gain access to sensitive information stored…

Code injection attacks, the infamous king of vulnerabilities, have lost the top spot to broken access control as the worst…

Researchers have disclosed an out-of-bounds read vulnerability in the Squirrel programming language that can be abused by attackers to break…

A threat actor, previously known for striking organizations in the energy and telecommunications sectors across the Middle East as early…

Patching really, really matters – patching is what keeps technology solutions from becoming like big blocks of Swiss cheese, with…