Read about Jen Easterly's perspective on the need for company leaders to own cyber risk management and the step CISA has ...

CISA, the government agency tasked with securing the U.S.’ cyber and physical infrastructure, has released new Information Technology (IT) Sector-Specific Goals (SSGs).

Hidden dependencies, social engineering attacks, and the complexity of foundation models can all contribute tothe insecure ...

The incoming Trump administration is expected to make several policy changes likely to impact tech transactions. President-elect Donald Trump ...

Ask any chief information security officer (CISO), cyber underwriter or risk manager, or cybersecurity attorney about what controls are critical ...

Put very simply, only use a fully encrypted platform. That means Signal or WhatsApp or iMessage (if strictly between Apple users) or Google Messages (if strictly between Android users). Do’t message ...

Mandiant says a Chinese cyberespionage group has been exploiting the critical-rated vulnerability since at least mid-December.

Google Cloud’s Mandiant has linked the exploitation of CVE-2025-0282, a new Ivanti VPN zero-day, to Chinese cyberspies.

The FBI and CISA strongly advise Americans to use fully encrypted messaging and calls due to ongoing Chinese hacking of US networks. Cross-platform messaging between iPhones and Androids via RCS lacks ...

This week, include Do Kwon's trial, penalty on a Siberian firm over illegal crypto mining, 2024 drainer attack statistics, US ...

The two issues aren't believed to be chained in the attacks. Ivanti said that CVE-2025-0282 is the exploited zero-day, but ...

Palo Alto Networks has released patches for multiple vulnerabilities in the Expedition migration tool, which was retired on ...