Latest security news

A report shows CISOs face increased pressures related to cyber resilience and business continuity.

Brett Leatherman said that industry has the wrong idea about what the FBI does with the data it collects during incidents, which is used to help victims and investigations alike.

DoppelCart’s fake stores copy real retailers and steal shoppers’ card details and one-time bank confirmation codes.

The document also focuses on helping victims, reflecting the bureau’s goal of encouraging more companies to share information with it.

"Workflow identity hijacking" can bypass standard security controls and hijack an organization's data by sending a basic request through an unauthenticated entry point.

MFA makes account takeover harder, but attackers are increasingly targeting the recovery processes used to reset passwords and authentication methods. Specops explains why stronger identity verification at the service desk is critical to preventing social engineering attacks from turning account recovery into account takeover.

SpyCloud claims non-human identities are the most likely route into the enterprise

Australia is proposing a law that gives people a choice over what fills their feeds. It may not be long before other countries demand the same.

Microsoft is adding new age-awareness APIs to Windows 11 that will allow apps to determine whether someone is a child, teenager, or adult without exposing their exact date of birth.

The deputy director cited Operation Absolute Resolve as evidence that cyber teams have become central to CIA missions.