2018 saw a reduced number of huge DNS-facilitated DDoS attacks. Vendors and service providers believe that malicious impact will drop with continued technology improvements.

Top reward for iOS remote exploit hits $2 million, as companies who sell exploits to national governments have to offer more money to attract researchers to tackle increasingly secure software.

The app is accused of being a “location data company powered by weather” and profiting from users’ data without being upfront about it.

Australians got scary texts, emails and phone calls from a trusted emergency warning service late last week after a hacker broke into its systems and used it to send fake messages.

Stop shaking your head about “WhatsApp Gold” flimflam and start spreading these REAL nuggets of hoax-clobbering advice!

How easy is it to bypass the average smartphone’s facial recognition security? In the case of Android, a lot easier than owners may think.

The update comes on the heels of critical fixes in an unscheduled patch last week.

The recently disclosed Marriott breach exposed a frequently ignored issue in the M&A process.

​Learn how one company is capitalizing on machine learning to address phishing problems.

Deal gives Sophos a new AI-based cloud security platform.

The noted cryptography expert has joined the advisory board of the quantum key exchange provider.

Sometimes, the limited length of an SMS makes it easier for the crooks to ‘get it to look right’ and reel you in to a phishing site…

A series of 2018 cybersecurity incidents shows credential stuffing is a trend to watch among healthcare organizations.

The whole attack takes place in under a minute.

To protect yourself, you must know where you're vulnerable — and these tips can help.

Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading

Microsoft January Patch Tuesday roundup includes four critical patches for its Edge browser.

Bad actors are targeting higher-level executives in the shipping industry with simply phishing attacks that could lead to credential theft or worse - system compromise.

When criminals use technology to propagate social engineering attacks, securing your organization can become complicated. Here's what you need to know about phishing and spearphishing.

This month's security update includes seven patches ranked Critical and one publicly known vulnerability.