If you're the Nextcloud admin for your company or home office, you might want to restrict who has access to the ONLYOFFICE suite of tools. Jack Wallen shows you how.

A privilege-escalation vulnerability patched in February by Microsoft continues to affect Exchange servers, with more than 80% of Internet-connected servers remaining vulnerable, one firm reports.

Researchers warn of critical flaws in SAP's Sybase Adaptive Server Enterprise software.

The stealthy backdoor is delivered via mass-market phishing emails that are well-crafted to appear convincing.

How time flies – the latest four-weekly Firefox update is out.

If you use the Nextcloud mobile app, you'll want to password protect it to ensure you don't leave your sensitive data open for anyone to see.

Organizations that fail to comply with these rules can get hit with backbreaking fines and class-action lawsuits.

The platform from Sensory helps people adapt to the COVID-19 world, providing a way to unlock devices without having to remove protective face coverings.

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading

A security researcher details how RobbinHood has changed and why it remains a threat for businesses to watch.

Findings from the latest FISMA report are out and while the number of total cybersecurity incidents in 2019 were down, the federal government continues to face challenges mitigating basic security vulnerabilities.

A phishing email claims to send the recipient to a VPN configuration page for home access but instead leads them to a credential-stealing site, said Abnormal Security.

A proposed class-action lawsuit accuses Google of collecting browser data from people who used private mode.

An attack over the weekend unsuccessfully targeted 1.3 million WordPress websites, in attempts to download their configuration files and harvest database credentials.

The newly discovered USBCulprit malware is part of the arsenal of an APT known as Cycledek, which targets government entities.

Remote Access Trojans (RATs) can be the beginning of very bad things on your network or workstations.

'USBCulprit' is one of several tools that suggest previously known Cycldek group is more dangerous than previous assumed, security vendor says.

A OneLogin survey covered how employees are using work devices for a variety of other things.

Researchers are warning of spear-phishing emails with CV lures that spread the ZLoader malware, which steals banking credentials from victims.