Cybersecurity News, Awards, Webinars, eSummits, Research

A threat actor is using AlienFox to harvest API keys and secrets from cloud service providers, including AWS Simple Email Service, Google Workspace and Microsoft Office 365.

Amnesty International’s Security Labs reported March 29 that it found a mercenary spyware campaign exploiting a zero-day in Android devices.

The company's CISO said a bundled library contains an executable file, and urges network defenders to uninstall the desktop client.

Evan Gershkovich, a U.S. citizen, was detained in the eastern city of Yekaterinburg, on suspicion of collecting "secret information" about a Russian defense company, according to a translated version of the Federal Security Service's statement on Thursday. 

The FDA intends to start rejecting medical devices for cybersecurity reasons in October, but new submissions must include plans beginning March 29.

At least one entity was compromised through a critical pre-authentication YAML deserialization vulnerability in IBM Aspera Faspex file transfer service; a patch was issued in January.

Security pros see letter from Elon Musk and other big names in tech as media hype and call for a more level-headed approach — even regulation.