Jeff Goldman

The Fodcha DDoS botnet has grown dramatically - and is now demanding an untraceable ransom.

Could data exfiltration eventually replace ransomware? Recent developments suggest that ransom tactics may change.

The Magniber ransomware group is targeting individual PCs by using JavaScript to bypass Windows warnings.

While the Text4Shell vulnerability is far less dangerous than Log4j, it still highlights the dangers of software dependencies.

Hackers apparently have launched a LinkedIn spear-phishing campaign that includes an undetectable PowerShell backdoor.

Unclear marketing and lack of formal standards make buying cybersecurity products difficult, and there's no clear answer on the horizon.

Microsoft's latest patch Tuesday patched a number of critical vulnerabilities - but not the web-facing ProxyNotShell.

Pro-Russia cyberattackers launch DDoS attacks on U.S. airport websites, highlighting the importance of critical infrastructure security.

With Uber's former CSO facing jail time for covering up a data breach, CSOs are on notice that they must follow compliance laws.

In an active week for Microsoft vulnerabilities, the latest hits SQL Server - and U.S. agencies disclosed attacks by China too.

Microsoft's instructions for mitigating the ProxyNotShell vulnerabilities can be bypassed so researchers have offered an alternative.

Microsoft Exchange continues to be a favorite target of hackers, with reports of two new exploits surfacing this week.