Explore the latest news and expert commentary on Application Security, brought to you by the editors of Dark Reading

To enable medical care while encouraging social distancing during the COVID-19 pandemic, the Department of Health and Human Services temporarily loosened up on some of its HIPAA noncompliance enforcement on telehealth. But what happens if there's a PHI slip…

Software vendors keep pushing patches to the same Tuesday once a month, or once a quarter, and the result can be overwhelming. Six enterprise software makers issued patches for 567 issues in April.

The Big Bad Wolves haven’t blown the house down but did come up with a way to “hold the three little pigs responsible for being delicious,” Signal said.

Cybercriminals are deploying COVID-19-themed gift card scams, wire transfer scams, and payroll scams aimed at organizations and their employees, according to security provider Trustwave.

The more things change, the more they stay the same. Much of the world is still behind on the basics.

FBI said that government agencies aiming to buy critical items like ventilators have unknowingly transferred funds to threat actors.

Intel fixed nine high- and medium-severity flaws in its April security update, which could enable privilege escalation and denial of service attacks.

If you reuse an old password when you’re rushing to create a new account for the lockdown era, you’re as good as “pre-hacking” yourself.

The Chinese ISP has expanded its program via HackerOne.