Criminals are changing tactics to match changing business conditions in the coronavirus pandemic, according to a new report.

Phishing campaigns could compromise business data and use Amazon's cloud platform to launch further attacks, says KnowBe4.

Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading

If election defenders are protecting votes, and adversaries are attacking something else entirely, both sides might claim success, Operation BlackOut simulation shows.

Researchers have unearthed more vulnerabilities in Microsoft’s IoT security solution.

IT teams have had to learn to be dynamic as workforces continue to shift strategies while COVID-19 drags on.

Up to 200,000 patient records from Office 365 and Google G Suite exposed by hardcoded credentials and other improper access controls.

Humans are susceptible to normalcy bias, which may leave us vulnerable to disinformation that reinforces our beliefs.

From web app flaws to a lack of 2FA, Rapid7 found lots of common soft targets in the networks it breached on behalf of clients.

Threat actors are becoming increasingly sophisticated in launching disinformation campaigns - and staying under the radar to avoid detection from Facebook, Twitter and other platforms.

Slow patching provides vulnerabilities to exploit. A lack of network segmentation allows unrestricted lateral movement. Yet a report surveying a year of penetration tests finds that passwords still top the list of what attackers use to compromise systems.

The public is increasingly wary of the privacy of their data. Companies reliant on it should take this as a sign of the future of customer loyalty, says data privacy firm Privitar.

Cloud computing changed the technology landscape forever. Here's hoping that trust will be the next frontier of computing.

The popular Autodesk software was exploited in a recent cyberespionage campaign against an international architectural company.

A well-written article on the APNIC blog has provoked a thoughtful response from the Chromium coders – and we can all learn from it!

The defendant allegedly planned to pay an employee $1 million to infect the company network with malware.

Under the shared responsibility model, the security management of cloud offerings is split equally between the vendor and the customer. Easy enough, right?

Risk levels are not steady states. Here are six indications that the danger posed by your supply chain is headed in the wrong direction.

Nine bugs were patched, eight of which are rated ‘high’ severity.