Alerts

Lenovo has issued patches for several serious vulnerabilities in its products stemming from Intel technology fixes.

An unpatched high-severity vulnerability allows keystroke injections in Fujitsu wireless keyboards.

Attackers are increasingly targeting insecure legacy protocols, like IMAP, to avoid running into multi-factor authentication in password-spraying campaigns.

A full 39 percent of Counter-Strike 1.6 game servers on Steam were found to be malicious.

Vulnerability allows adversaries to access monitoring system used for gathering info on operating systems and hardware.

A new malware targeting point of sale systems, GlitchPOS, has been spotted on a crimeware forum.

Increasingly, attackers are targeting the most vulnerable people inside companies and exploiting their weaknesses.

A Sydney man is accused of selling nearly 1 million compromised accounts, for a significant profit.

Intel has patched several high-severity vulnerabilities in its graphics drivers for Windows 10, which could lead to code execution.

The mobile app, dubbed a "Yelp for Conservatives," was found with an open API leaking reams of user data.

Why are hackers using the DNS infrastructure against us? The answer is more complex than you might think.

Newly patched CVE-2019-0797 is being actively exploited by two APTs, FruityArmor and SandCat.

Money earmarked for the Defense Department and DHS, and bipartisan bills to address the security of federal IoT devices, showcase growing federal cyber-efforts.

Microsoft's March Patch Tuesday updates include 64 fixes, 17 of which are rated critical.

Scammers used both older, tested-and-true phishing tactics in 2018 - but also newer tricks, such as fresh distribution methods, according to a new report.

Microsoft won't be patching the bug, but a proof of concept shows the potential for successful malware implantation.

Adobe fixed two arbitrary code execution flaws in its Photoshop and Digital Edition products.

IRIDIUM is an APT that uses proprietary techniques to bypass two-factor authentication for critical applications, according to security firm Resecurity.

In all, Google reported 45 bugs in its March update with 11 ranked critical and 33 rated high.

In this video, Josh Zelonis, senior analyst at Forrester Research, discusses the next great security threats to enterprises.