Risk

During a keynote at Black Hat 2022, former CISA director Chris Krebs outlined the biggest risk areas for the public and private sectors for the next few years.

In her keynote address at Black Hat USA 2022, Kim Zetter gives a scathing rebuke of Colonial Pipeline for not foreseeing the attack.

Up-and-coming companies shoot their shot in a new feature introduced at the 25th annual cybersecurity conference.

Even among businesses with cyber insurance, they lack coverage for basic costs of many cyberattacks, according to a BlackBerry survey.

Because demonstrating compliance with industry regulations can be cumbersome and expensive, it's important to ensure they're also absolutely essential.

A Q&A with NCC Group's Viktor Gazdag ahead of a Black Hat USA session on CI/CD pipeline risks reveals a scary, and expanding, campaign vector for software supply chain attacks and RCE.

The finding exposes the danger of older, unpatched bugs, which plague at least 4.5 million devices.

Study offers a cyber "state of the industry" analysis from a hacker's perspective to help companies anticipate attacks.

A rising tide of threats — from API exploits to deepfakes to extortionary ransomware attacks — is threatening to overwhelm IT security teams.

For the right price, threat actors can get just about anything they want to launch a ransomware attack — even without technical skills or any previous experience.

A global network of inauthentic news sites present themselves as independent news outlets, offering content favoring China's government and articles critical of the US.

Copado's Kyle Tobener will discuss a three-pronged plan at Black Hat USA for addressing human weaknesses in cybersecurity with this medical concept — from phishing to shadow IT.

The new program offers robust protection across all five data risk categories: cyber, human, application, operation, and environmental.

Customers across several European countries are urged to update credentials in the wake of the attack that affected a gas-pipeline operator and power company.

The campaign uses four malicious packages to spread "Volt Stealer" and "Lofy Stealer" malware in the open source npm software package repository.