Adobe has become the latest company to be caught leaving an Elasticsearch database full of customer data exposed on the internet.

CVE-2019-11043 is trivial to exploit -- and a proof of concept is available.

Trustwave’s Shawn Kanady on the evolution of ransomware attacks, why the public sector appears to be taking the biggest hit, and whether organizations should pay the ransom

The ZDI-run competition has been laying the ICS groundwork for years

A Magecart skimmer, discovered on the site of First Aid Beauty, was only just removed after being in place for five months.

Traditionally, the worlds of IT (the hoodie) and OT (the hard hat) have been separate. That must change.

Johannesburg spent the weekend struggling to recover from its second malware attack this year as it took key services systems offline.

US lawmakers asked intelligence to look into whether the app and others like it could pose a security threat or be used to influence opinion.

A mirror copy of the BBC’s international news website is now available to users on the so-called dark web.

Attacks are targeting international companies in the financial sector, demanding that victims pay ransom in Bitcoin.