News

Revised policy means security analysts won't be charged under the Computer Fraud and Abuse Act.Source

Shadowserver Foundation researchers find 380,000 open Kubernetes API servers.Source

Mobile attacks have been going on for many years, but the threat is rapidly evolving as more sophisticated malware families with novel features enter the scene.Source

For the first time in a year, security incidents involving email compromises surpassed ransomware incidents, a new analysis shows.Source

System of Trust includes data-driven metrics for evaluating the integrity of software, services, and suppliers.Source

Last month attackers quickly reverse-engineered VMWare patches to launch RCE attacks. CISA warns it's going to happen again.Source

From a scrappy contest where hackers tried to win laptops, Pwn2Own has grown into a premier event that has helped normalize bug hunting.Source

Publicly released proof-of-concept exploits are supercharging attacks against unpatched systems, CISA warns.Source

Build security in up front to secure open source code at the foundational level. Apply security controls, have engineering teams test, do code review, and use attacker-centric behavioral analytics to mitigate threats.Source