Threatpost editors discuss the highlights and biggest breaking news from this past week.

The latest Building Security in Maturity Model (BSIMM9) report offers a statistically backed, bare-minimum benchmark for software security initiatives.

The business of fake likes and followers turns out to be a sprawling enterprise -- likely tied back to IoT botnet activity.

Technology such as Apple's device trust score that decides "you" is "not you" is a good thing. But only if it works well.

Top infosec trends in the social media spotlight this week.

By John Mason

Ryan Lin was just recently sentenced to 17 years in prison. He was sentenced for committing a range of crimes including cyberstalking, computer fraud and abuse, aggravated identity theft, and distribution of child pornography. These are all serious crimes that I in no way support or condone, but why am I particularly interested in the […]

This is a post from HackRead.com Read the original post: Don’t ever use a VPN without paying attention to these five things

Netherlands expels four of the suspects trying to break into an organization investigating a chemical used in the recent attack on a former Russian spy in Britain.

Risk assessment can be complex, but it's vital for making good decisions about IT security. Here are steps to start you down the path toward a meaningful risk assessment process.

If true, the attack using Supermicro motherboards could be the most comprehensive cyber breach in history.

Five out of six name brand routers, such as Linksys, NETGEAR and D-Link, contain known open-source vulnerabilities.