Consumers are growing angry when it comes to data misuse - but the real change will need to come from the tech industry's culture when it comes to privacy.

Once upon a time, buyers purchased products from certified sellers. Today, hoarders use botnets to amass goods at significant markup for a new gray-market economy.

Businesses also leave information vulnerable in the cloud by failing to implement MFA and configure Kubernetes settings, new research reveals.

Microsoft patches nine critical bugs as part of December Patch Tuesday roundup.

Italy's regulator found the social giant guilty of misleading consumers as to what it does with their data.

Goal is to steal banking credentials by redirecting users to phishing sites.

Serious bugs addressed today include a Win32K privilege escalation vulnerability and Windows DNS server heap overflow flaw.

A new congressional report says the credit reporting firm's September 2017 breach was 'entirely preventable.'

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading

Data brokers are tracking 200 million mobile devices in the US, updating locations up to 14,000 times a day, the New York Times has found.

As CAPTCHA-haters know to their frequent irritation, the death of the text-based Completely Automated Procedures for Telling Computers and Humans Apart tends to be exaggerated.

Google has disclosed the second security hole in its Google+ social network in three months. This one exposed 100 times as many users’ private information as the first, and has prompted the c…

Flaws in the mobile site were leaving users vulnerable to attackers who could have reset their user passwords and hijacked their accounts.

Experts sound off on how companies can work with their third-party suppliers and partners to secure the end-to-end supply chain.

Constant learning is a requirement for cybersecurity professionals. Here are 15 books recommended by professionals to continue a professional's education.

The news comes amid reports that a Chinese intelligence-gathering effort was behind the massive Marriott hotels data breach.

Operation Sharpshooter uses a new implant to target mainly U.S.-based nuclear, defense, energy and financial companies.

Once DevOps teams decide to shift left, they can finally look forward instead of backward.

One out of every 100 emails an enterprise receives is a phishing scam, and the attackers behind them are getting more sophisticated.

The purchase adds risk assessment to Arctic Wolf's SOC-as-a-service.

Some 88% of organizations aren't correctly managing access to data stored in files, according to a SailPoint report.