Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading

Modular design, ability to infect network shares make the malware dangerous, McAfee says.

Modular design, ability to infect network shares make the malware dangerous, McAfee says.

All government domain owners are instructed to take immediate steps to strengthen the security of their DNS servers following a successful hacking campaign.

Trend Micro team unearthed 17 vulnerabilities among seven vendors' remote controller devices.

Phishers often spoof major tech brands in their efforts to gain payments from individuals and businesses, according to a Vade Secure report.

Apple has issued its January security updates fixing a list of mostly shared CVE flaws affecting iOS and macOS with a smattering for Safari, watchOS, tvOS, and iCloud for Windows.

With the CISO at the table, organizations must focus on products, processes, and people to stay secure, according to the executive director of the National Cyber Security Alliance.

Did you see the story about the US family whose Nest camera “warned” them of an impending nuclear attack? Here’s how to keep hackers out…

The decision means Yelp, and other platforms, are still protected from liability for user-submitted content under the CDA’s Section 230.

A bomb threat spam campaign that hit North America last month may have been engineered using a flaw in GoDaddy’s domain management process, it was revealed this week.

Come to Black Hat Asia in March for an expert look at what's happening in the world of Internet of Things, and what you can do to secure it.

These apps will help keep your enterprise safe from malware and other cybersecurity threats.

Perpetrators are using smaller, bit-and-piece methods to inject junk into legitimate traffic, causing attacks to bypass detection rather than sounding alarms with large, obvious attack spikes.

Security updates for the lifespan of a given device are critical to protecting your connected device against hackers, according to a Barracuda report.

Multicloud is much more popular than hybrid cloud, with only 33% of professionals using a hybrid model, according to a Kentik report.

The big corporations may grab the headlines, but America's SMBs have the most to lose in the aftermath of a data breach.

Credential compromise emerged the main target for phishing campaigns in 2018 - rather than infecting victims' devices with malware.

The most common attacks involved software vulnerabilities, stolen credentials, Web applications, and IoT devices.