A recent study shows that if you aren’t prepared to ask or pay for security, you probably won’t get it.

Some 11% of US business computers are at risk of malware infection, compared to 20% of home PCs, according to an Avast report.

Downloaded by 63K users, the quizzes promised answers to questions such as “What kind of dog are you according to your zodiac sign?”

Smaller organizations are more agile at patching vulnerabilities, and vendor support goes a long way in easing patching, according to a report from Kenna Security and the Cyentia Institute.

A new guide from the Cloud Security Alliance offers mitigations, best practices, and a comparison between traditional applications and their serverless counterparts.

Adobe fixed two arbitrary code execution flaws in its Photoshop and Digital Edition products.

Microsoft won't be patching the bug, but a proof of concept shows the potential for successful malware implantation.

As the number of breaches increased 424% in 2018, the average breach size shrunk 4.7 times as attackers aimed for smaller, more vulnerable targets.

Nearly 100 companies were exposing sensitive data, including raw CAD files and Social Security Numbers, on misconfigured Box accounts.

It's possible to intelligently deploy and utilize Windows 10's many security enhancements while avoiding common and costly migration pitfalls.

Meanwhile, organizations are looking at nonconventional ways to staff up and train their workforce as technical expertise gets even harder to find.

User errors in enterprise Box accounts have left hundreds of thousands of sensitive documents exposed to thieves and peeping toms.

Scammers used both older, tested-and-true phishing tactics in 2018 - but also newer tricks, such as fresh distribution methods, according to a new report.

March Patch Tuesday updates include 64 CVEs, 17 of which are rated critical.

DevOps-minded CISOs say enterprise security teams need to do a better job scoring and visualizing risk for developers and business executives.

Money earmarked for the Defense Department and DHS, and bipartisan bills to address the security of federal IoT devices, showcase growing federal cyber-efforts.

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading

Attackers used a short list of passwords to knock on every digital door to find vulnerable systems in the vendor's network.

Critical vulnerabilities in web applications tripled in 2018, according to a new study.

Most organizations are doing all they can to keep up with the release of vulnerabilities, new research shows.