The Glamoriser Smart Bluetooth straightener offers up yet another example of how not to add a risky product to the Internet of Things (IoT).

Google's throwing in the towel on XSS Auditor and putting its trust in Trusted Types instead.

Two years after promising to report all HTTP-based web pages as insecure, Mozilla is about to deliver.

At Black Hat, analysts from MITRE and Splunk will detail how organizations of many different sizes are leveraging ATT&CK's common language.

KrebsOnSecurity has seen some creative yet truly bizarre ads for cybercrime services in the underground, but the following animated advertisement for a popular credit card fraud shop likely takes the cake.

Two months after the alarm sounded warning of a WannaCry-level event, progress in patching exposed Windows systems varies by country and industry.

Researchers discover a third-party algorithm in multiple high-profile Bluetooth devices exposes users to third-party tracking and data access.

The last-June breach exposed data includes names, phone numbers, and account numbers.

New research on password management tools identifies the relative strengths and weaknesses of 12 competing offerings.

Lenovo, Acer and five additional server manufacturers are hit with supply-chain bugs buried in motherboard firmware.