Lindsey O'Donnell-Welch talks to Ken Munro with Pen Test Partners about the biggest challenges around securing Internet of Things devices, and how regulatory efforts and consumer awareness are beginning to have a positive impact on the IoT security landscape.
Overall, Microsoft patched 55 flaws, including four critical-severity remote code execution bugs.
The DarkSide ransomware hit the Colonial Pipeline on Friday, forcing the company to take its main distribution lines offline to recover.
The Lemon Duck cryptocurrency-mining botnet was seen behind a spike of April attacks exploiting the Microsoft Exchange server ProxyLogon flaw.
Google Project Zero's recent tweaking of its vulnerability disclosure window reflects how researchers are taking into account patch adoption when mulling disclosure policies.
The newly disclosed Moriya rootkit has been used since at least 2018 in a campaign targeting large regional diplomatic organizations in Asia and Africa.
Dennis Fisher talks with Peter Baker, the founding brand designer at Duo and the man behind the Decipher brand, about his design philosophy, the earliest days of Scio/Duo, why design matters in security, and the influence that positivity and usability has had on the industry.
Slowing or stopping the global ransomware threat will take cooperation among government, enterprises, and law enforcement.
Apple has fixed four zero days in WebKit for iOS, macOS, and Safari that were under active attack.
Dennis Fisher talks with Katie Moussouris, Rich Mogull, Kymberlee Price, and Thomas Ptacek about the unique and inspiring life and legacy of hacker Dan Kaminsky.
Government officials and technology experts call for more collaboration between the public and private sectors when it comes to securing industrial control system environments.
The high-severity Dell flaws could allow local attackers to gain kernel-mode privileges.
PulseSecure has released patches for several flaws in its Connect Secure VPN appliance, one of which has been used in active attacks for some time.
Cybercriminals have rewritten the Buer malware loader in the Rust programming language, in an attempt to avoid detection.
Researchers shed light on the FiveHands ransomware, which was deployed after a threat group exploited a now-patched SonicWall flaw in January.