Read about the saga of Facebook's failures in ensuring privacy for user data, including how it relates to Cambridge Analytica, the GDPR, the Brexit campaign, and the 2016 US presidential election.

A new malware technique is making phishing attacks harder to spot when they succeed.

California looks set to regulate IoT devices, becoming the first US state to do so and beating the Federal Government to the post.

The infosec community say California’s IoT security bill is “nice,” but doesn’t hit on the important issues.

…and using the credit card terminals to allegedly issue themselves fraudulent returns and to steal taxpayer IDs and bank info.

The data-management firm’s customer database held names, email addresses, some IP addresses and more: a wealth of ammo for phishers.

Nation-state adversaries from Iran to Russia have leveraged the supply chain as a vehicle to compromise infrastructure and disrupt businesses.

The companies join forces to broaden their privileged access management portfolio and will take on the BeyondTrust name.

The 38-year-old Russian national operated several botnets and infected thousands of systems with malware.

Explore the latest news and expert commentary on Cyber Risk, brought to you by the editors of Dark Reading

The second-most popular delivery method is CVE-2017-11882, a patched Microsoft vulnerability that allows the attacker to perform arbitrary code-execution.

It’s in the terms of service, as one man found out after Apple removed three movies from his iTunes library.

Jail time for fake reviews is “a landmark ruling for the Internet,” TripAdvisor said.

Less than a week after Chrome was updated to hide the "www" from users, Google have put the subdomain back into the address bar.

Jail time for fake reviews is “a landmark ruling for the Internet,” TripAdvisor said.

Project Verify from Verizon, AT&T, Sprint and T-Mobile aims to replace your password.

A hacker used their own code to tamper with a smart contract run by a betting company, and walked off with $24,000.

The threat group has racked up a list of victims including Feedify, Groopdealz and British Airways.

North America is the region where C-Suite leaders are most likely to be blamed for a breach.