Infosec advocacy group warns that poor patching practices and reliance on cracked software increases risk.

Security teams need to start factoring for these tools when thinking about the software supply chain. After all, they can’t protect what they don’t know they have.

Just in time for the US election season, one of the Kremlin’s favorite hack-and-leak spy groups — Star Blizzard — has developed its very first custom backdoor.

A panel of CISOs acknowledged that artificial intelligence has boosted the capabilities of threat actors, but enterprise defenders are actually benefiting more from the technology.

Just like you and me, cyberattackers returned from winter break and immediately started sending thousands of emails.

These vulnerabilities are the second and third for Citrix but are not expected to be as detrimental as “CitrixBleed.”

Cyberattackers are exploiting Docker instances to drop the bot-tastic 9hits Web traffic generator and “earn” valuable credits that can be turned into cash.

A government app experiencing slowdowns on election day could be just the tip of the vote-meddling iceberg for the Asian country. But who’s behind it?

Insurers doubled premiums in late 2021 to offset losses from ransomware claims. With attacks rising again, organizations can anticipate a new round of increases.

Modified malware from the Khepri open source project that shares similarities with the ZuRu data stealer harvests data and drops additional payloads.