The good news is the cost of a data breach is down double-digits, the bad news the size and scope of breaches is creeping up.

Researchers have neutralized the latest strain of the Jaff ransomware, releasing a decryption tool for unlocking files.

Phishing sites are deploying freely available TLS certificates in order to dupe victims into thinking they’re visiting a safe site.

A recently released extension for Chrome, developed by the public key crypto database Keybase, brought end-to-end encrypted messaging to several apps this week.

The country’s top cybersecurity boss said the country is headed the wrong way when it comes to cybersecurity.

The Senate’s use of the end-to-end encrypted messaging app Signal is a good first step in protecting U.S. democratic institutions, but much more needs to be protected.

The results of two audits of the open source software OpenVPN were shared late last week. One found two legitimate vulnerabilities, the other said the service is cryptographically “solid.”

A new malware family called Jaff has been identified by researchers who say they are currently tracking multiple and massive spam campaigns distributing the malware via the Necurs botnet.

Apple takes countermeasures to neutralize OSX/Dok HTTPS-snooping malware by revoking a hijacked certificate updating its XProtect built-in anti-malware software.

Dan Geer’s Source Boston keynote included a declaration that cybersecurity and humanity’s future are forever conjoined.