According to security researcher Eaton Zveare, a series of misconfigurations and security vulnerabilities allowed him to access customer information stored in an email account at Toyota Tsusho Insurance Broker India (TTIBI).

The Cybersecurity and Infrastructure Security Agency (CISA) has released its fourth annual Year in Review, which highlights the US agency's efforts to protect the nation from cyber and physical threats as well as improve the resilience of critica

The two-volume document, with the overall title "NIST Special Publication (SP) 800-55 Revision 2: Measurement Guide for Information Security," provides guidance on establishing an effective cybersecurity program as well as a flexible approac

Khalifa University researchers developed a novel approach to improve Unmanned Aerial Vehicle (UAV) communication security and robustness.

Environmental services websites are becoming major targets for Distributed Denial-of-Service (DDoS) attacks, with Cloudflare researchers reporting a 61,839 percent year-over-year increase in the fourth quarter of 2023.

According to cyber threat analysts at China's Qianxin X Laboratory, over 100,000 Android TVs and set-top boxes have been infected with unknown malware.

Foxsemicon, one of Taiwan's largest semiconductor manufacturers has suffered a cyberattack, allegedly carried out by the LockBit ransomware gang.

Due to a high-severity vulnerability that exposed credentials, GitHub has rotated a number of its keys. The vulnerability, disclosed through its bug bounty program, would give attackers access to credentials within a production container.

The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have released a joint Cybersecurity Advisory (CSA) about the AndroxGh0st malware.

Switzerland recently announced that a cyberattack claimed by a pro-Russian group temporarily disrupted access to a number of government websites following Ukrainian President Volodymyr Zelensky's visit to Davos.

PAX Technology's Point-of-Sale (PoS) terminals are vulnerable to attacks due to a set of high-severity flaws that threat actors can exploit to execute arbitrary code.

As attackers gain more knowledge about how to crack static signature-detection engines, increasingly sophisticated infostealers are targeting macOS with the ability to evade Apple's built-in malware protection.