Hundreds of millions of Facebook users had their account passwords stored in plain text and searchable by thousands of Facebook employees -- in some cases going back to 2012, KrebsOnSecurity has learned. Facebook says an ongoing investigation has so far found no indication that employees have abused access to this data.

Behind the scenes at the world’s most popular vulnerability scoring system

‘This should be in the OWASP Top 10 in 2025’

The most serious vulnerabilities in Cisco's 8800 Series IP Phones could allow unauthenticated, remote attackers to conduct a cross-site request forgery attack or write arbitrary files to the filesystem.

A researcher has published a new and relatively simple way that Windows BitLocker encryption keys can be sniffed in less secure configurations as they travel from Trusted Platform Modules (TPMs) during boot.

A researcher has discovered a high-severity bug in a popular PHP library used for creating PDFs.

Opera lost its Android browser's VPN after it was sold to a Chinese consortium, but now it's back.

Peek-a-boo ping

According to a new report, average and maximum DDoS attack sizes decreased by 85.36% and 23.91%.

Researchers said 1 million user sessions could have been exposed to the campaign, which downloads the Shlayer trojan.