Stephen Weigand

CyberRisk TV speaks with Menlo Security's Andrew Harding at the Black Hat 2024 conference in Las Vegas on how threat actors have moved towards exploiting browsers as other services become more secure.

The Texas Attorney General's Office sued General Motors, alleging the automaker is illegally collecting customer driving data from 1.5 million Texans

The idea of an international standard for “cyber deception” has turned into a contentious subject, and the UK government has taken up the challenge.

Personal information, such as mailing addresses and phone numbers, at risk in misconfiguration.

Attackers have moved on from stealing passwords to stealing authentication tokens. Here's how the attacks work, and how to guard against them.

Security pros say the Entra ID flaw could let attackers impersonate a user with Global Admin privileges, even the CEO.

While admins could defer MFA enforcement until April 2025 as long as they request to do so between Aug. 15 and Oct. 15, Microsoft warned that such postponement would open admin portals to increased cybersecurity risks.

Information leaked by the misconfigured database included individuals' full names, emails, phone numbers, encrypted passwords, and verification tokens, as well as join dates and private chats.

California lawmakers have approved new legislation that would enable consumers to more easily refuse private data sharing and sales in internet

No matter how much security training an organization conducts for its staff, if your plan involves people not failing, then your plan is going to fail.