Compromising the open-source supply chain is easy to do and spreads more quickly than traditional supply-chain attacks, ...

Pharmaceutical maker Amgen has notified the U.S. Securities and Exchange Commission that cybercriminals have potentially ...

The Aerospace Village at annual hacking conference Defcon, famed as the home of the Hack-A-Sat contest which culminated in ...

Remote management and monitoring software developer N-Able published a second hotfix to patch a vulnerability in all versions ...

Okta said its planned acquisition of Permiso will expand identity threat detection beyond native Okta telemetry by adding ...

While many public health agencies may want to use AI, they often lack resources, tech knowledge and security guidance. A new ...

ThreatLocker raised $190 million in Series F funding to expand zero trust protections against autonomous AI agents while ...

In this week's panel, four ISMG editors discussed Google's controversial new threat actor naming system and the need for ...

The coming of the vulnocalypse - our artificial intelligence-instigated moment of drastically accelerating flaw discovery - ...

A bank’s SEC filing over unauthorized AI use shows how shadow AI can turn an employee shortcut into a material cyber event.

Cyberattacks don't wait for business hours, and your managed detection and response (MDR) provider shouldn't either. While ...

Digital extortion group Clop, aka Cl0p, has been tied to a fresh spate of supply-chain attacks, this time targeting users of ...