How the Major Intel ME Firmware Flaw Lets Attackers Get ‘God...

Researchers at Black Hat Europe today revealed how a buffer overflow they discovered in the chip's firmware can be abused to take control of a machine - even when it's turned 'off.'

Cyberattack: It Can’t Happen to Us (Until It Does)

Just because your small or medium-sized business isn't as well known as Equifax or Yahoo doesn't mean you're immune to becoming a cybercrime victim.

Study: Simulated Attacks Uncover Real-World Problems in IT Security

Some 70% of simulated attacks on real networks were able to move laterally within the network, while more than half infiltrated the perimeter and exfiltrated data.

Bitcoin Sites Become Hot Targets for DDoS Attacks

The Bitcoin industry is now one of the top 10 most-targeted industries for DDoS campaigns. Price manipulation could be one goal, Imperva says.

6 Personality Profiles of White-Hat Hackers

From making the Internet safer to promoting their security careers, bug bounty hunters have a broad range of motivators for hacking - most just like the challenge.

Android Developer Tools Contain Vulnerabilities

Several of the most popular cloud-based and downloadable tools Android developers use are affected.

Improve Signal-to-Noise Ratio with ‘Content Curation:’ 5 Steps

By intelligently managing signatures, correlation rules, filters and searches, you can see where your security architecture falls down, and how your tools can better defend the network.

FBI, Europol, Microsoft, ESET Team Up, Dismantle One of World’s Largest...

Avalanche, aka Gamarue, aka Wauchos, malware enterprise spanned hundreds of botnets and 88 different malware families.

NSA Employee Pleads Guilty to Illegally Retaining National Defense Secrets

Nghia Hoang Pho faces up to eight years in prison for removing highly classified NSA data from workplace and storing it at home.

PayPal’s TIO Networks Suffered Data Breach Exposing Data on 1.6 Million...

PayPal states TIO Networks, a payment processing company it acquired this summer, is not part of its network and PayPal remains unaffected by the breach.

The Rising Dangers of Unsecured IoT Technology

As government regulation looms, the security industry must take a leading role in determining whether the convenience of the Internet of Things is worth the risk and compromise of unsecured devices.

Tips for Writing Better Infosec Job Descriptions

Security leaders frustrated with their talent search may be searching for the wrong skills and qualifications.