Important-rated EoP flaws make up the bulk of the CVEs; SharePoint continues its critical run with four worrying bugs.

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

Three new reports detail malware coming out of the Hidden Cobra cyber operations in North Korea.

Cybercriminals used the REvil ransomware to attack a law firm used by the likes of Lady Gaga, Drake and Madonna. Now, they're threatening to leak the 756 gigabytes of stolen data.

Experts worry that without proper planning, today's decisions about developing contact-tracing apps could have unforeseen consequences in the years to come.

Almost every application uses open-source components and 91% use libraries that are out of date or that have been abandoned altogether.

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading

Threat actors have pivoted from noisy attacks to intrusions where stealth and ROI are primary goals, new report says.

Use of the kid-addicting, video-sharing app is exploding during lockdown, triggering yet another inquiry into how safe it is for young ones.

The APT's new cyber-attack tools are laid bare on three-year anniversary of WannaCry.

Getting over the cybersecurity skills gap takes creativity, flexibility, and a willingness to go off-script when it comes to picking out candidates.

The outbreak of COVID-19 has triggered a wave of scams, from fake pharmacies to stimulus payment promises to phony cryptocurrency wallets, says Bolster.

Companies that don't have a social media presence or posts that don't list salary or benefit information are a big turnoff, SimplyHired survey finds.

While some users are up to speed with the WFH protocol, it's worth adding a few more items to your security checklist.

With the shift toward remote working, cybercriminals have been targeting exploits in VPN, Internet of Things, and authentication technology, says cybersecurity firm Nuspire.

Preventing idle SSH sessions from remaining connected is an easy way to add a bit more security to secure shell. Find out how.

Logins, personal information and tax info were all exfiltrated ahead of the ransomware attack, thanks to a phishing email.

The cyber-espionage toolkit is under active development.

A new report from Kudelski Security provides companies tips for how to recruit and retain talent up for the digital challenges of tomorrow.

The $70 million deal is intended to help CyberArk strengthen its portfolio with secure and SaaS-based identity management.