The latest SectopRAT variant comes hidden within “tampered legitimate software that steals credentials and enables remote system control”.

Cisco has confirmed a vulnerability that could allow a remote attacker to run arbitrary commands with root privileges on the OS

Google has confirmed that, with immediate effect, it has increased the Chrome security update cycle in response to concerns about AI vulnerability discoveries.

Pre-orders for the new Apple iPhone 18 Pro and Pro Max begin on Saturday, September 12. Now fraud experts warn that scammers are already trying to take your money.

Are you doing enough to support your security team's mental health as patch counts continue to escalate dramatically?

Microsoft has patched 973 vulnerabilities, including actively exploited Windows CVE-2026-85880 and CVE-2026-81963 bugs. How should your organization respond to stay safe?

As Google confirms a bumper round of 230 Chrome security vulnerabilities, including 5 critical ones, there’s no need to panic — or do anything but sit back and wait.

Users of the Plex streaming platform have been told to update both the media server and desktop as soon as possible “to address a number of security issues.”

Up to 5,000 Dropbox users have received emails notifying them that their accounts were compromised by attackers in August

The US Cybersecurity and Infrastructure Security Agency (CISA) has released two pieces of guidance for orgs facing the "patch apocalypse"

An Oracle vulnerability patched in January is now being actively exploited, prompting CISA to give federal agencies just 72 hours to secure affected systems.

An Oracle vulnerability patched in January is now being actively exploited, prompting CISA to give federal agencies just 72 hours to secure affected systems.

The Chrome browser memory vulnerabilities just keep on coming. Now Google has released two security updates in 48 hours to fix three such critical bugs.

Our security expert reveals the lessons to learn from the Pokemon data breach that has affected thousands of customers in the UK and Germany

Customers of the Pokemon Center in the UK and Germany have been warned to take care after confirmation that order data was leaked following a supply chain breach.

Meta has announced it is to roll out a new optional feature that leverages an on-device AI machine-learning model to help detect and prevent WhatsApp scam attacks.

Signal has added an automatic key verification (AKV) feature to help combat ‘Person-in-the-Middle’ attacks, but it isn't without problems

Microsoft has released a patch for a Windows use-after-free zero-day vulnerability already being exploited to deploy malware used by the Lazarus hacking group.

We’ve all been there: hitting reply all to a group message by mistake. Google has introduced a new warning to save Gmail users from a BCC privacy and security faux pas.

Google has released another update to the Chrome browser; 12 of the 41 vulnerabilities fixed were found by bug bounty hunters. Here’s why that still matters.