A password alone may not be secure enough. Tara Calishain shows you how to use two-factor authentication, an additional security step for your online accounts.

In the 1,006 days since Donald Trump became president, his administration has shown little vigilance when it comes to its own security, and a new internal memo suggests the White House is working to weaken its own cybersecurity safeguards.

Nearly two decades ago, a company called Interpeak created a network protocol that became an industry standard. It also had severe bugs that are only now coming to light.

Decommissioning a data center is lot more complicated than shutting down servers and switches. Here’s what you should keep in mind.

Apple is taking flak for disputing some minor details of last week’s bombshell report that, for at least two years, customers' iOS devices were vulnerable to a sting of zeroday exploits, at least some of which were actively exploited to install malware that stole location data, passwords, encryption keys, and a wealth of other highly sensitive data.

For two years, a handful of websites have indiscriminately hacked thousands of iPhones.

Because calendar spam is now a thing

Cisco Talos researchers report finding eight security vulnerabilities in the Nest Cam IQ that can allow attackers to take over the camera, prevent its use or allow code execution.

A coordinated strike against 23 local governments is called the largest such hack from a single source.

There are still "larger implications for privacy across the web" for all users.

Nothing is sacred

Some kids play in a band after school. Bill Demirkapi hacked two education software giants.

The Android Security team's former tech lead, who's now a security researcher on Google's Project Zero, breaks down why.

Apple plans to hand out $1 million to researchers who find the most critical weaknesses in iPhones.

You don't even have to click anything.

Google brings its Advanced Protection for Gmail to Chrome, but it only works if you're logged in.

Changes to configuration files don't change signature, can add malicious features.

A few months after confirming five vulnerabilities known as Dragonblood in the WPA3 standard, researchers have now found two more.

Dear Engineer. You failed your licensing exam. Open this document to learn more.

Hackers successfully targeted Russia's state security agency last week through a major contractor, stealing and publishing details of secret internet projects including social media scraping and Tor de-anonymization.