Holy Water campaign is targeting users of a specific religious and ethnic group in Asia, Kaspersky says.

Exabeam's employees are recovering from coronavirus. Both tested positive for COVID-19 after attending RSA in San Francisco.

Teleconferences are being disrupted by internet trolls shouting profanity and racist remarks and posting pornographic and hate images.

It’s been difficult keeping track of all the scams leveraging the COVID-19 pandemic to steal your money or your personal information. Now, the FBI is warning of increased attacks that target the supply chain and the healthcare industry in addition to “Zoom…

About 10 compromised websites employ a multi-stage, targeted effort to fingerprint and compromise victims.

Researchers mapped tactics and techniques to the MITRE ATT&CK framework to determine which were most popular last year.

Akamai, AWS, Azion, Cloudflare, Facebook, and Netflix are now members of the Mutually Agreed Norms for Routing Security (MANRS) effort.

Every once in a while an attack comes along that is so simple to set up, and yet so effective, that it makes your jaw drop. Here’s one.

An effective spoofing campaign promises users important information about new coronavirus cases in their local area, scooting past Proofpoint and Microsoft Office 356 ATPs.

To keep users and networks healthy and secure, security teams need to mimic countries that have taken on COVID-19 with a rapid, disciplined approach.

Check out Dark Reading's updated, exclusive news and commentary surrounding the coronavirus pandemic.

The zero-day Zoom flaws could give local, unprivileged attackers root privileges, and allow them to access victims’ microphone and camera.

If you are lucky enough to be able to do your job from home right now, you should be aware of a few key things.

This campaign tries to trick users into accepting a fake Adobe Flash update, which then installs malware to give the attacker full remote access, says Kaspersky.

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading

A second vulnerability could be used to prevent access to almost all of a site’s existing content, by simply redirecting visitors.

Understanding the limitations of authentication protocols, especially as enterprises link authentication to cloud services to Active Directory, is essential for security teams in the modern federated enterprise.