Hackers are using a sophisticated social engineering ruse targeting IT help desk staff to gain initial access to healthcare organizations.

The Cybersecurity and Infrastructure Security Agency has been urged by the U.S. Chamber of Commerce and over 20 industry groups to implement a 30-day extension to the two-month feedback period for its draft rule under the Cyber Incident Reporting for Critical Infrastructure Act, which would require cyber incident and ransomware disclosures within a 72- and 24-hour period, respectively, reports The Record, a news site by cybersecurity firm Recorded Future.

Technology firms would be subjected to online data collection restrictions under a new bipartisan and bicameral draft online privacy bill unveiled by Senate Commerce Committee Chair Maria Cantwell, D-Wash., and House Energy and Commerce Committee Chair Cathy McMorris Rodgers, R-Wash., Reuters reports.

By breaking Apple and Google’s app store dominance, the EU’s Digital Markets Act can potentially launch a revolution in mobile app development and security.

NVD checked out, then they came back? Maybe? Should the xz backdoor be treated as a vulnerability? Is scan-driven vulnerability management obsolete when it comes to alerting on emerging threats? What were some of the takeaways from the first-ever VulnCon? EPSS is featured in over 100 security products, but is it properly supported by those t...

AT&T has been hit with a deluge of class-action lawsuits after confirming following a series of denials the legitimacy of data belonging to 73 million customers, including 7.6 million current account holders, which was initially published by ShinyHunters in 2021 before being exposed again by MajorNelson last month, BleepingComputer reports.

Russia won’t change its tactics, but we can expect they will use tools like deepfakes to influence elections.