Cyberattackers are exploiting CVE-2023-7028 (CVSS 10) to take over and lock users out of GitLab accounts, steal source code, ...

Threat actor dropped in to Dropbox Sign production environment and accessed emails, passwords, and other PII, along with APIs ...

The space agency needs to implement stricter policies and standards when it comes to its cybersecurity practices, but doing ...

A recent campaign targeting Middle Eastern government organizations plays standard detection tools like a fiddle. Cyber ...

Weaponizing Microsoft's own services for command-and-control is simple and costless, and helps attackers better avoid ...

DMARC adoption is more important than ever following Google's and Yahoo's latest mandates for large email senders. This Tech ...

Though Olympics officials appear to have better secured their digital footprint than other major sporting events have, significant risks remain for the Paris Games.

The CVE-2024-27322 security vulnerability in R's deserialization process gives attackers a way to execute arbitrary code in ...

While other professions are making up ground, cybersecurity still lags behind in female representation, thanks to a lack of ...

Microsoft has uncovered a common vulnerability pattern in several apps allowing code execution; at least four of the apps ...

MOVEit drove a big chunk of the increase, but social engineering and failure to patch led to a doubling of data breaches ...

Unmanaged and unknown Web services endpoints are just some of the challenges organizations must address to improve API ...