Security News

Businesses were hit hardest by inbox-based scams in 2015 that robbed U.S. companies of $263 million.

A federal judge granted a defense motion in the case of a Vancouver teacher charged with possession of child pornography, excluding evidence gathered by a FBI network investigative technique that...

Mariusz Mlynski is having a May to remember, earning $30,000 in bounties from Google for vulnerabilities he discovered and disclosed, on top of another $15,500 earlier this month from the same program.

Microsoft says enterprises need to ban common passwords and rethink outdated ideas about what makes a strong password.

Researchers tracked a Locky ransomware and spam attack that spoofed an Amazon shipping email that included an estimated 100 million sent missives.

The coalition behind CanaryWatch.org, a database of warrant canaries, has decided to no longer accept new submissions, nor monitor existing canaries for changes.

Embedded serial device servers built by Moxa and used in a number of critical industries remain vulnerable to three serious security issues that have not been patched by the vendor.

Wekby attackers are turning to the technique known as DNS tunneling in lieu of more conventional HTTP delivery of command and controls for remote access control of infected computer networks.

Researchers at Kaspersky Lab have identified six APT groups using exploits for a Microsoft Office flaw that was patched in September 2015.

Google wants to kill passwords with Project Abacus, which Google said will become available on Android devices by the end of 2016.