A new survey suggests that security is becoming more important for enterprises, but they’re still falling back on old "security by obscurity" ways. [...]

The vulnerability affects all unpatched Windows 10 versions following a messy Microsoft January update. [...]

The researcher found that he could gain unauthorized camera access via a shared iCloud document that could also "hack every website you've ever visited." [...]

The sweetened deal came on the same day that Trustwave SpiderLabs published a new way to bypass Outlook security to deliver malicious links to victims. [...]

Companies must take more ‘innovative and proactive’ approaches to security in 2022 to combat threats that emerged last year, researchers said. [...]

Meanwhile, Zerodium's quest to buy VPN exploits is problematic, researchers said. [...]

Enlarge (credit: Joshua Sortino ) Telegram patched another image self-destruction bug in its app earlier this year. This flaw was a different issue from the one reported in 2019. But the researcher who reported the bug isn't pleased with Telegram's months-long turnaround time—and an offered $1,159 (€1,000 …

The security vulnerabilities bring the web behemoth up to 10 browser zero-days found so far this year. [...]

The bug in Edge's auto-translate could have let remote attackers pull off RCE on any foreign-language website just by sending a message with an XSS payload. [...]

Experts from Intel, GitHub and KnowBe4 weigh in on what you need to succeed at security bug-hunting. [...]

The zero-day flaw research group has revised its disclosure of the technical details of vulnerabilities in the hopes of speeding up the release and adoption of fixes. [...]

A bug-bounty program launched for the Teams desktop videoconferencing and collaboration application has big payouts for finding security holes. [...]

A cyberattacker taunted the site about open security vulnerabilities, prompting a code review. [...]

A survey from Intel shows that most organizations prefer tech providers to have proactive security, but few meet security expectations. [...]

Ethical hacker Alex Birsan developed a way to inject malicious code into open-source developer tools to exploit dependencies in organizations internal applications. [...]

Major browsers get an update to fix separate bugs that both allow for remote attacks, which could potentially allow hackers to takeover targeted devices. [...]