Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading

COVID-19 means many people are doing their jobs from outside the confines of the office. That may not be as easy as it sounds.

Microsoft issued an out-of-band security update for a critical SMB bug (CVE-2020-0796) on Thursday.

A study from Resilience360 listed cyberthreats as one of the biggest issues facing global supply chains in 2020.

A CASB isn't a WAF, isn't an NGF, and isn't an SWG. So what is it, precisely, and why do you need one to go along with all the other letters? Read on for the an

Two malware modifications, when combined, can snatch cookies collected by browsers and social networking apps.

Cookiethief steals cookies to infiltrate Facebook and other web service accounts.

While PXJ performs typical ransomware functions, it does not appear to share the same underlying code with most known ransomware families.

The trojans are designed to gain control of Facebook user accounts by capturing browser cookies in Android, says Kaspersky.

The costs associated with data breaches climb alongside the amount of data managed by the enterprise according to the latest Global Protection Index Snapshot.

Threat actor's practice of using known malware and tactics gives an opening for defenders, says Recorded Future.

Researchers say the exposure includes exact locations of users’ last posts, nicknames, age, and gender.

In this article we discuss the recent NordPass' third-party audit and its results. We look at the process, and how useful it might be for the users.

As of June 2019, CBP had processed more than 20 million travelers using facial recognition, civil rights group ACLU says.

The bill, which would undercut Section 230 protections for online publishing, presents itself as a way to stop online child abuse.

While there have been some successes when it comes to getting women involved in tech, by and large, we haven't made enough progress.