IETF floats formal deprecation suggestion, even for failback

Malicious actors leverage Word as the vector of choice.

Researchers reported that the hospitality industry remains a top target for hackers aiming to steal data or access accounts using botnets and stolen credentials.

Why cyber? Because CERT-EU was already taken

Infosec wizards show how spies can snoop on website traffic, redirect browsers over 4G

Same being used against ordinary US citizens?

Physical security keys, such as Yubico's YubiKey Security Key, have protected all Google employees from phishing attacks since early 2017. Here is how the $20 devices work as an alternative approach to two-factor authentication.

Billions of devices potentially at risk – but Intel isn't worried

Cisco patches critical and high severity vulnerabilities in its RV series, SD-WAN, Umbrella and other products

A macOS App called Adware Doctor blocks ads, but shares user browser history with a China-based domain.

The attack by Chinese spies reached almost 30 U.S. companies by compromising America's technology supply chain.

The vulnerability is one of many with the same root cause: Cross-process information leakage.

***

Google Project Zero researcher unearths a bug in Microsoft’s Notepad Windows application.

A recently detected campaign of targeted cyber attacks utilized tools built by combining multiple open-source techniques, Cisco Talos security researchers say.

Backward Compatibility is Hard, and so is Stacked Impersonation by Simon Raner and Mitja Kolsek, the 0patch Team [Update 6/12/201...

SandboxEscaper details new "ByeBear" zero-day impacting Windows 10 and Server 2019.