CISA cites 16 CVEs impacting industrial systems in ICS advisory, four critical.

Threat actors are getting more work from the private sector than from government sponsored agencies.

Tenable researchers say “ConfusedComposer” highlights how attackers can exploit cloud service permissions.

Continued brain drain includes two of the experts who managed CISA’s Secure by Design program.

Microsoft said it's making strides in guarding its own systems against external threat actors.

Recent Fog samples are spread through phishing emails referencing pay adjustments.

Researchers advise security teams to block sources of bulletproof hosting.

Bruce Schneier on security theater, AI snake oil, and the limits of cryptographic morality.