Microsoft OS flaws, out-of-bounds reads, ICS gear and a record number of high-severity bugs marked 2019 for the ZDI program.

debug_backtrace reloaded A PHP bug initially dismissed as posing no security threat could potentially enable code execution outside the sandbox in shared-server environments, a new exploit has reveale

Red teamers exonerated

Coronavirus postpones DEF CON China; Avast caught in the act; and the UK gives the go ahead to Huawei on 5G

A zero-trust, prevention-first approach is necessary to keep us safe, now and going forward.

Larger winnings for underground skills competitions are attracting sophisticated crime groups.

UN staffers: the "entire domain" was probably compromised by an attacker who was lurking on the UN's networks.

The DOI has doubled down on a previous order, keeping the agency’s drones grounded for another 30 days for a more in-depth security review.

They use it to offer things like budgeting apps. It puts passwords and privacy at risk, but some say they can't afford to build APIs instead.

Program is the latest the tech giant has launched that pay users and security researchers to find vulnerabilities in its numerous products.