Authentication

Attackers use convincing fake website interfaces and sophisticated geo-fencing to target users exclusively in Mexico and Brazil with a new variant of the malware.

The Swedish maker of Yubikeys has merged with special purpose acquisition company ACQ Bure.

MFA may go a long way in improving password security, but it's not foolproof.

Cyberattackers could exploit CVE-2023-20238 to carry out a variety of nefarious deeds, from data theft and code execution to phishing, fraud, and DoS.

The popular travel rental site is an ideal destination for cybercrooks bent on taking over accounts and bookings.

Information was exposed on hundreds of crypto-related bankruptcy claimants in proceedings involving FTX, Genesis, and BlockFI.

Users report losing access to their accounts, with some being pressured into paying a ransom to get back in or else face permanent account deletion.

Want heated seats for free? Self-driving in Europe despite a regulatory ban? Researchers have discovered the road to free car-modding on the popular Tesla EVs.

Nearly 200 models are affected by vulnerability that may give wireless access to unauthorized third parties.

Voice, face, and vein recognition each have its pros and cons. Here's what CISOs need to know.

As companies navigate how to protect themselves from the onslaught of increasingly sophisticated fraud threats, artificial intelligence will be a critical piece of next-gen authentication.

A flaw in the REST API of Cisco's SD_WAN vManage software could allow remote, unauthenticated attackers to perform data exfiltration.

The hackers posted up for sale stolen HCA Healthcare data on Dark Web forum.

Vulnerable Nexus 9000 Series Fabric Switches in ACI mode should be disabled, Cisco advises.

The "nOAuth" attack allows cross-platform spoofing and full account takeovers, and enterprises need to remediate the issue immediately, researchers warn.