Many machines, including almost all Apple laptops and desktops produced since 2011, are vulnerable to data exfiltration via weaponized peripherals.

SentinelOne and Intel announced a new method to detect cryptomining and cryptojacking attacks using hardware-based detection technology.

Third time's hopefully a charm for Cisco as it patches a high-severity Webex flaw once again.

Researchers are urging Ring users to update to the latest version of the smart doorbell after a serious flaw triggered privacy concerns.

The campaign is marked by a significant level of customization, with an “individualized yet very consistent approach to every compromise

Researchers investigate malicious apps designed to intercept calls to legitimate numbers, making voice phishing attacks harder to detect.

Learn about what GLBA means for data protection and how to achieve GLBA compliance in Data Protection 101, our series on the fundamentals of information security.

Operating a database of software vulnerabilities is a challenging undertaking, according to private vulnerability database operator Risk Based Security.

Although human oversight is required, advanced technologies built on AI will become pivotal in building safer financial markets and a safer world.

Vishwanath Akuthota has been accused of using a 'USB killer device' to destroy dozens of computers, officials report.

CQTools suite includes both exploit kits and information-extraction functions, its developers say.

Illinois man offered DDoS for hire services that hit millions of victims.

The new Intel SGX Card is intended to extend application memory security using Intel SGX in existing data center infrastructure.

Study of the Bronze Union group-also known as APT27 or Emissary Panda-underscores how most advanced persistent threat (APT) groups now use administrative tools or slight variants of well-known tools.

As in previous years, input validation vulnerabilities accounted for a substantial proportion of total, Risk Based Security report shows.

Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading

The US blocked internet access to Russian trolls who, they say, were trying to spread FUD.

A steady stream of hair-raising revelations about the treatment of users’ data by Facebook, et al. is pushing Congress to do *something.*

Researchers have revealed how malicious Thunderbolt and PCI Express (PCIe) peripherals could be used to compromise computers running macOS, Windows, Linux and FreeBSD.

From data exfiltration over FM radio to open-source cybersecurity training suites, Black Hat Asia's Arsenal offers live demos of the latest security tools.

Cisco said that CVE-2019-1663, which has a CVSS score of 9.8, allows unauthenticated, remote attackers to execute arbitrary code.