Vulnerabilities enable hacking camera feeds and other restricted functions.

UK intelligence service stresses default position is to disclose

Employee risk and third-party visibility continues to be a challenge

Credential-stuffing attack targets rewards points from DD Perks account holders.

Researchers discover a new family of injections dubbed EternalSilence.

Since its release in 2017, Headless Chrome has grown popular among DevOps and attackers.

Three years of attacks caused $30m in losses for hospitals, cities and others

Personal info was left publicly accessible for at least two weeks

Attackers may have obtained names, emails and hashed passwords

Attacker uses malicious code to gain legitimate access to JavaScript library EventStream.