The recent zero-day vulnerability CVE-2018-8440 in Windows Task Scheduler enables attackers to perform a privilege elevation on targeted...

Password inadequacy remains a top threat in internet security, according to a new report from WatchGuard Technologies.

BlackBerry Security Summit London: CEO John Chen details how the company wants to harness machine learning and AI.

Dark Reading: Connecting The Information Security Community. Explore our slideshows.

Osiris’ fundamental makeup positions it in the fore of malware trends, despite being based on old source code that’s been knocking around for years.

A flaw in Safari - that allows an attacker to spoof websites and trick victims into handing over their credentials - has yet to be patched.

Explore the latest news and expert commentary on Mobile Security, brought to you by the editors of Dark Reading

Jack Wallen activates and enables Android Pie's new lockdown mode.

IoT attacks, budget shortfalls, and the skills gap are among the problems keeping security pros up at night.

Biometric authentication can be good for security and for business, according to a new study from Goode Intelligence

The development fits a trend that sees threat actors turning to well-known, commodity malware, overcoming its easy detection with ever-better obfuscation methods.

In their place is a collection of new exploits for more recently disclosed - and therefore not likely widely patched - vulnerabilities.

A site spoofing the official Jaxx website was discovered packing several infections for Windows and Mac machines, and has been shut down.

Read about the saga of Facebook's failures in ensuring privacy for user data, including how it relates to Cambridge Analytica, the GDPR, the Brexit campaign, and the 2016 US presidential election.

A new malware technique is making phishing attacks harder to spot when they succeed.

California looks set to regulate IoT devices, becoming the first US state to do so and beating the Federal Government to the post.

The infosec community say California’s IoT security bill is “nice,” but doesn’t hit on the important issues.

…and using the credit card terminals to allegedly issue themselves fraudulent returns and to steal taxpayer IDs and bank info.

The data-management firm’s customer database held names, email addresses, some IP addresses and more: a wealth of ammo for phishers.

Nation-state adversaries from Iran to Russia have leveraged the supply chain as a vehicle to compromise infrastructure and disrupt businesses.