Vulnerabilities in HDL Automation smart products could be abused to take over user accounts and remotely control devices deployed in homes, commercial buildings or hotels.

Troy Hunt, the security expert who handles the breach notification website Have I Been Pwned, announced late last week that he is ready to make the code behind the site available in open source.

Multiple Reddit moderator accounts have been compromised and abused to post pro-Trump messages on a variety of subreddits.

Email and data security provider Mimecast on Thursday announced the acquisition of messaging security company MessageControl.

Roughly one month after senators introduced a “balanced” bill that would require tech companies to provide law enforcement with access to encrypted user data, a companion bill was introduced in the House of Representatives this week.

A vulnerability that Zoom addressed in its web client could have allowed hackers to join private meetings by brute-forcing the passcode.

Identity and access protection provider Ermetic secured $17.25 million in a Series A funding round, which brings the total amount raised by the company to $27.3 million.

AWS announces the general availability of a fully managed service designed to help customers identify potentially fraudulent online activities.

The VHD ransomware family that emerged earlier this year is the work of North Korea-linked threat actor Lazarus.

North Korean-linked threat actor Lazarus has been employing at least four new Mac-targeting malware families in recent attacks.

In the past several days, a hacker managed to replace the payloads typically delivered by the Emotet Trojan with GIF images.