A recently discovered malware steals cache data and messaging sessions from the desktop version of encrypted messaging service Telegram.

Researchers created a proof-of-concept attack that allows remote attackers to access protected APIs to extract credentials.

A team of academic researchers has demonstrated that it’s possible to possible to closely mimic legitimate voice commands in order to carry out nefarious actions on these home assistants.

Threatpost talked to several security researchers about what’s changed in the past year.

Cryptominer WinstarNssmMiner is an aggressive malware strain that has launched 500,000 attacks in the past three days earning criminals $28,000.

Sources said the funds were diverted to fraudulent accounts in a coordinated heist that involved hundreds of wire transfers and on-the-ground accomplices.

Universal Plug and Play networking protocols can be exploited to bypass DDoS mitigations.

The fajitas purveyor announced the point-of-sale payment-card breach on Friday May 11, the same day that it learned about it.

Samsung updates S9, Note 8 and S8 phones with 27 patches from a RCE bug to a patch that prevents an ancient peek-and-poke attack first identified in 1980s.

Researchers maintain Microsoft’s vaunted Arbitrary Code Guard in the Edge browser can’t stop hackers from mounting attacks.