darkreading

As the 104th season of the National Football League kicks off, expect cyberattacks aimed at its customers, players, and arenas.

To prevent this, organizations should focus on developing secure hardware and firmware foundations, enabling them to manage, monitor, and remediate hardware and firmware security.

A technique to abuse Microsoft's built-in source code editor has finally made it into the wild, thanks to China's Mustang Panda APT.

Their findings highlight the frailty of some of the mechanisms for establishing trust on the Internet.

An attacker is using the tool to deploy a cryptominer and the Tsunami DDoS bot on compromised systems.

The dangerous ransomware group is targeting financial and insurance sectors using smishing and vishing against IT service desk administrators, cybersecurity teams, and other employees with top-level privileges.

Law enforcement seized electronics containing special hacking tools and software as well as a substantial amount of cash in the raids.

Most investors aren't demanding cybersecurity preparedness from startups, but founders should still be worried about the risks.

Understanding a threat is just as important as the steps taken toward prevention.

A vendor honeypot caught two attacks intended to leverage the tens of thousands of exposed Selenium Grid Web app testing servers.

With an immature codebase and a "rather chaotic encryption scheme" prone to failure, the group targets small businesses with custom malware.

The Institute for Security and Technology's UnDisruptable27 project connects technology firms with the public sector to strengthen US cyber defenses in case of attacks on critical infrastructure.

The latest step in a journey to serve cybersecurity professionals in other regions of the world.

Business intelligence firm Gartner labels security orchestration, automation, and response as "obsolete," but the fight to automate and simplify security operations is here to stay.