Seven different Windows privilege escalation vulnerabilities have not yet been addressed by Microsoft, two months after they ...

Our reporting and industry perspectives for cybersecurity professionals focused on SecOps. Also: DR's new podcast; CISA's ...

IBM's surprise departure from cybersecurity software this week didn’t just rearrange the competitive landscape — it also ...

Cryptocurrency theft and financial fraud are the new M.O. of the 15-year-old malware operation that has hit organizations ...

The improper input validation issue in Intel Neural Compressor enables remote attackers to execute arbitrary code on affected ...

Financial firms covered under new regulations will be required to establish a clear response and communications plan for ...

Cybersecurity cannot be solely about defending against threats; it must also empower organizations with their data.

Most companies still can't determine whether a breach is material within the four days mandated by the SEC, skewing incident ...

Google has rolled an emergency patch for CVE-2024-4947, the third Chrome zero-day it's addressed in the past week.

Thankfully, GE ultrasounds aren't Internet-facing. Exploiting most of the bugs to cause serious damage to patients would ...

Researchers believe the attacker is likely China-affiliated, since a previous version of the malware was used by a China ...

For example, in a September 2023 report, we explored the use of generative artificial intelligence by Chinese influence ...