Microsoft announced this week its giving users a new way to sign into their accounts without long and complicated passwords.

InterContinental Hotels Group said on Friday that it found malware designed to access payment card data at more than 1,000 of its hotels.

At F8 today, Facebook released SDKs and documentation for the integration of Delegated Account Recovery into Java, NodeJS and Ruby applications.

A new ransomware-as-a-service called Karmen appeals to ransomware newbies with a low price, easy setup and developer updates.

A rash of Java-based remote access Trojans is targeting tax filers with bogus IRS attachments.

The FDA sent Abbott Laboratories a warning letter citing that it had inadequately addressed the security of the maligned Merlin@home Transmitter.

Academics argue that Netflix’s recent upgrade to HTTPS is doing little to protect its users from a passive traffic analysis attack.

University researchers created a browser-based JavaScript that leverages a phone’s smart device sensor data to steal PINs.

Researchers have learned that the recently patched Office zero day was used to target victims in Russia with FINSPY spyware.

A Microsoft Word zero-day vulnerability is being used to spread the Dridex banking Trojan in attacks that have bypassed mitigation efforts.