Business email compromise (BEC) attacks, in which cyber criminals impersonate the CEO or CFO of an organization to trick employees into transferring large sums of money, are on a steep upswing.

There's a new cybersecurity regulation in town, but your company isn't on the hook for compliance.

A new security threat makes it possible to hack a new Mac laptop right out of the box. Wired reports that the exploit targets companies using Apple's Device Enrollment Program and Mobile Device Management platform to let employees perform their own customized IT setups from a satellite office or home.

What price for privacy? Facebook is measuring it in billions. The company lost 24% of its value during its latest earnings call, in part because its much-publicized failures to secure user data are forcing privacy upgrades that will be costly to implement and will slash advertising revenues.

Everybody loves to get something for nothing—which is why cyber criminals are having a lot of success convincing people to give away a lot of personal information in exchange for a free gift card.

If you lose your luggage on the go, it's an inconvenience, but you can buy new socks and a toothbrush almost anywhere. But if you lose your phone or laptop—or the data on them—you can't fix it with a quick shopping trip. And with new security threats keep popping up all the time, you shouldn't assume you're already doing all the right things to protect yourself.

Security and privacy usually go hand in hand, but they can also conflict. For example, encryption keeps sensitive information away from prying eyes, but it can also disguise malware sneaking onto your network.

We've talked before about how SMBs are low-hanging fruit for cybercriminals: they have more to steal than individuals and weaker defenses than large companies. Unfortunately, that's more true than ever.

The things you tell your employees to do for IT security can make it harder for them to get things done. That's why employees so often ignore even the best corporate security policies.

Demand for insurance policies to cover the damages of cybercrime is rising as companies recognize that the question isn't whether they'll be attacked, but when.