CISA’s recently introduced framework for hardware bill of materials is an important step in addressing semiconductor risks. But further tracking beyond manufacturing is critical to its usefulness.

The feds disrupted a Russian intelligence SOHO router botnet notable for being built with Moobot malware rather than custom code.

A spate of recent cyber-espionage attacks showcases Turla’s brand-new modular custom malware, and an expansion of the state-sponsored group’s scope of targets.

The industry is evolving from one of conventional threat detection toward a strategy that emphasizes context and preempts user behavior.

Using a custom Python script to send bulk phishing messages with a USPS lure, the cyberattackers are posing a risk to consumer-facing organizations moving workloads to the cloud.

Boards of directors don’t care about a security program’s minute technical details. They want to see how key performance indicators are tracked and used.

It’s not theoretical anymore: the world’s major powers are working with large language models to enhance their offensive cyber operations.

The finance services giant says it was hacked — and reported the incident proactively before SEC requirements mandated it. It could be an anti-extortion move, or merely a brand protection effort.

Threat actors first infected the Hipocrate Information System with a variant of the Phobos ransomware family — and then it spread across the nation’s healthcare organizations.