Arielle Waldman

Google's three-phase plan for mandatory MFA, which will culminate in late 2025, follows similar efforts from other cloud providers such as AWS and Microsoft.

Alexander Moucka was arrested last week and is expected to appear in court Tuesday for allegedly breaching dozens of Snowflake customers.

Many ransomware attacks in October resulted in prolonged disruptions for victim organizations across an array of sectors including healthcare and education.

Attackers exploited significantly more zero-day vulnerabilities against victim organizations in 2023 compared to 2022, according to a new government advisory.

Infoblox published a report detailing a hijacking attack dubbed 'Sitting Ducks' stemming from misconfigurations with domain registrars and DNS providers.

CISA and the FBI published a joint statement regarding an investigation into Chinese nation-state actors that breached telecommunication providers.

Palo Alto Networks confirmed two zero-day vulnerabilities in its PAN-OS software are under "limited" exploitation.

Apple published a security update with limited details on zero-day vulnerabilities CVE-2024-44308 and CVE-2024-44309 in macOS Sequoia.

Cyber insurers and infosec experts weigh in on criticism of insurance policies that reimburse ransom payments.

Volexity discovered a Russian nation-state group breached a victim organization by compromising nearby Wi-Fi networks and exploiting a previously known vulnerability to gain intel on Ukraine.