The five vulnerabilities could lead to local privilege escalation without user interaction.

Women are increasingly taking on top roles within Russian-speaking threat actor groups.

China’s campaign against U.S. telecoms has been ongoing for years.

Identity protection in healthcare was a dominant theme at last week’s Semperis HIP conference, with many participants offering guidance on how to improve medical cybersecurity.

Easterly has led the agency since July 2021 and was instrumental in driving the Secure by Design initiative.

Security pros say Helldown aims for maximum impact by targeting VMware systems.

Threat actors are hiring freelance pentesters to improve the effectiveness of their ransomware attacks

Huntress researchers describe two SafePay ransomware incidents resulting in file encryption and exfiltration.

Palo Alto Networks says that customer devices could be under threat from an actively-targeted critical security flaw

Spoofs from government agencies target businesses that regularly run DocuSign transactions with U.S. state, municipal and licensing authorities.