If one hacked port can threaten America’s orange juice supply, imagine what nation-state malware already lurking in our docks ...

Federal agencies told to fix critical XXE vulnerability (CVE-2025-58360) in GeoServer after attackers gain a head start.

The year was marked by the acceleration of AI adoption by both defenders and attackers, greater third-party risks, and intensified governance pressure.

Medibank’s Head of Security Awareness, Daisy Wong, speaks candidly with CSO about her career journey and the power of culture in cybersecurity. She shares why security awareness only works when it ...

Static AES keys are enabling attackers to decrypt access tokens and reach remote code execution, triggering urgent patch ...

Identifying and securing ownership of assets can be a challenging task. In addition to multifactor authentication, ...

The company’s new approach is that anything touching Microsoft services is eligible for a bug bounty, regardless of its ...

Multiple hacking techniques allow researchers to bypass XML signature validation while still presenting valid SAML ...

Low-cost hardware hack opens the door to supply chain attacks against confidential computing servers in cloud environments.

Of course, cybersecurity projects are often complex because they need to reach across corporate silos and geographies to ...

Budget discussions are tiresome because cyber risks and expenses are rising in tandem. CISOs should therefore align their ...

The AI giant is setting up an advisory group of ‘experienced cyber defenders and security practitioners’ to advise it on ...