The new White House plan outlines proposed minimum security requirements in critical infrastructure — and for shifting liability for software products to vendors.
Read moreSold for around $5,000 in hacking forums, the BlackLotus UEFI bootkit is capable of targeting even updated systems, researchers find.
Read moreThe same "sophisticated" threat actor has pummeled the domain host on an ongoing basis since 2020, making off with customer logins, source code, and more. Here's what to do.
Read moreAccess-as-a-service took off in underground markets with more than 775 million credentials for sale and thousands of ads for access-as-a-service.
Read moreOvercoming the obstacles of this security principle can mitigate the damages of an attack.
Read moreA new report from Adaptive Shield looks at the how volume of applications being connected to the SaaS stack and the risk they represent to company data.
Read moreResearchers exploited issues in the authentication protocol to force an open redirection from the popular hotel reservations site when users used Facebook to log in to accounts.
Read moreIt's 10 p.m. Do you know what your children are playing? In the age of remote work, hackers are actively targeting kids, with implications for enterprises.
Read moreRogue software packages. Rogue "sysadmins". Rogue keyloggers. Rogue authenticators. Rogue ROGUES!
Read moreThere's never enough time or staff to scan code repositories. To avoid dependency confusion attacks, use automated CI/CD tools to make fixes in hard-to-manage software dependencies.
Read more
Recent Comments