Industry and ad hoc coalitions appear poised to help fill the gap created by NIST’s decision to cut back on CVE data enrichment.

In embracing device code phishing, attackers trick victims into handing over account access by using a service’s legitimate new-device login flow.

AI’s danger isn’t that it’s creating new bugs, it’s that it’s amplifying old ones.

The Maritime Transportation Security Act (MTSA) requires plans to protect OT systems, audits by independent third parties, and a hybrid OT-security role.

The National Institute of Standards and Technology carved a new path for vulnerability remediation by changing the way it prioritizes software flaws.