A Black Hat talk demonstrates the ease of poking holes in firewalls: How to break, bypass and dismantle macOS firewall products.

The glitch stems from a functionality intended to allow updates to the UEFI firmware.

Spam is back with a vengeance, thanks to the demise of attack vectors such as Adobe Flash.

Phishing emails purported to be commercial offers – but were really installing remote administration software on victims’ systems.

Three people believed to be member of the FIN7 (or Carbanak) hacking group have been arrested in Europe, according to the US DOJ.

A hacker has compromised Reddit’s systems and was able to make away with email addresses and account credentials.

A suspicious WhatsApp message carried the mobile cyberweapon known as Pegasus – sold by Israel-based company NSO Group to state-level actors around the world.

Hardest hit were organizations using Office 365, with incidents costing more than $2 million each.

In a resale scenario, a previous owner could continue to have access to the online account – with all the new owner’s information stored within.

Despite a looming deadline, over a quarter of federal agencies are still not using basic email security tools. `