A new exploit of a known vulnerability gives an attacker control of the Drupal-hosting server. A newly discovered vulnerability in Drupal has been exploited to turn infected systems into...

Sophos warns of a ‘protection racket’ scam email that threatens to infect victims with the ransomware variant if they don’t pay the attackers. A widespread new email scam purportedly...

A glimpse into how two new products for intrusion detection and entity resolution are using AI to help humans do their jobs. Machine learning, advanced heuristics, or artificial intelligence:...

More than 90 percent of respondents in a Tripwire survey in Europe expect attacks by state-sponsored threat actors to increase in the next 12 months. Incidents like last year’s...

The SANS Institute provides training related to cybersecurity and the safe use of technology within your organization. To provide this training, the SANS Institute captures and processes personal data...

A series of newly disclosed vulnerabilities could allow an attacker to gain control of industrial switches. Phoenix Contact has disclosed four vulnerabilities in switches in the FL SWITCH industrial...

The term ‘application security’ still applies to ‘serverless’ technology, but the line where application settings start and infrastructure ends is blurring. “Serverless” computing is essentially an application deconstructed to...

Threat group Thrip is using three computers based in China to steal data from targeted companies in Southeast Asia and the US, Symantec says. An advanced persistent threat group...

Hackers are using the infrastructure, meant to transmit data between applications, for command and control. The security tools and strategies financial services organizations use to protect their data could be...