Researchers found misconfigurations in 14 percent of analyzed apps—11,877 Android apps and 6,608 iOS apps—exposing users' personal information, passwords, and even medical information.

In its annual report on the state of industrial control systems security, industrial cybersecurity firm Dragos names four new foreign hacker groups focused on critical infrastructure systems.

The flaw, discovered by researchers at the security firm SentinelOne, showed up in a driver that Windows Defender uses to delete the invasive files and infrastructure that malware can create.

The DDoSecrets group is also offering to privately share an additional 1.9 terabytes of data from more than a dozen other firms with selected journalists or academic researchers.

Though some researchers say that the scale and severity of ransomware attacks crossed a bright line in 2020, others describe this year as simply the next step in a gradual and predictable devolution.

Branches of Co-op in the south of England have been using real-time facial recognition cameras to scan shoppers entering stores. It was quietly introduced for limited trials during the last 18 months.

Because states routinely spy on one another—friends and foes alike—there are a very limited number of credible punishments states can use to threaten others into not spying.

At the Black Hat Europe security conference, Forescout researchers will detail the bugs found in seven open-source TCP/IP stacks, the collection of network communication protocols that broker connections between devices and networks.

In addition to warning about the VMware bug, the NSA emphasized that it "encourages NSS, DoD and DIB network administrators to prioritize mitigation of the vulnerability on affected servers."

A hack that can let an attacker take full control of iPhones without user interaction is bad enough. One that can also then spread automatically from one iPhone to the next is practically unheard of.