Researchers can't quite explain why cyber threats look so different in Italy compared to everywhere else.

Fixing the critical PHP flaws is not as simple as clicking "Update." Here's how to assess your risk, and what you can do to protect yourself.

Relatively small data breaches in India can turn quite serious, thanks to a sophisticated underground market for trading PII.

Des centaines de magasins ont subi des pertes se chiffrant en millions d'euros parce qu'ils avaient fait appel à des tiers pour gérer le micrologiciel OT obsolète qui pilotait leurs systèmes de climatisation.

Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the unseen information comes to light.

Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.

Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.

Hundreds of stores lost millions of euros because they hired third parties to manage the outdated OT firmware running their cooling systems.

Organizations are reporting that employees face threats of stalking, physical violence, and abduction. But these alarming claims are hard to verify.

The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.

The attack on the British retailer shows that compromising a single identity can lead to much deeper penetration of the corporate network.

In the wake of an agentic attack against its own Medicare systems, Australia's government is feeling out what regulations might look like for frontier AI companies.

Patch middleware vulnerabilities now to avoid hardware-based MFA exploits in ultra-sensitive environments.

A trio of newly discovered backdoors walk and quack like legitimate edge solutions, so it's hard to tell they're not.

A year-old Chinese threat actor looks like a cybercrime gang, acts like a state-associated APT, and attacks organizations in unexpected places.

A purported ad-blocker exfiltrates reams of sensitive information and benefits from having Google's stamp of approval despite researcher warnings.

Agentic AI can smuggle arbitrary instructions from the Web, across multiple apps, into trusted internal communications channels.

Even if the organization locks down employee accounts, forgotten and lost service accounts can still undo the organization's entire M365 environment.

AI apps that interpret external data (read: most AI apps) need exceptionally rigorous security filters, or attackers can take advantage.

AI-driven cyberattacks used to be exotic. Soon, it'll be odd if threat actors aren't using agents to do all of their bidding.