An effective spoofing campaign promises users important information about new coronavirus cases in their local area, scooting past Proofpoint and Microsoft Office 356 ATPs.

To keep users and networks healthy and secure, security teams need to mimic countries that have taken on COVID-19 with a rapid, disciplined approach.

Check out Dark Reading's updated, exclusive news and commentary surrounding the coronavirus pandemic.

The zero-day Zoom flaws could give local, unprivileged attackers root privileges, and allow them to access victims’ microphone and camera.

If you are lucky enough to be able to do your job from home right now, you should be aware of a few key things.

This campaign tries to trick users into accepting a fake Adobe Flash update, which then installs malware to give the attacker full remote access, says Kaspersky.

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading

A second vulnerability could be used to prevent access to almost all of a site’s existing content, by simply redirecting visitors.

Understanding the limitations of authentication protocols, especially as enterprises link authentication to cloud services to Active Directory, is essential for security teams in the modern federated enterprise.

A spate of phishing attacks have promised financial relief due to the coronavirus pandemic - but in reality swiped victims' credentials, payment card data and more.

It's not just the IT and security team's responsibility to keep data safe -- every member of the team needs to be involved.

Like NotPetya, it overwrites the master boot record to render computers "trashed".