Insider threats are a larger concern for most organizations than cybercriminals or hacktivists, according to a BetterCloud report.

The vulnerability allows attackers to run arbitrary commands as root, which clearly undermines the security of the SoftNAS Cloud platform and data stored on it.

Here’s the latest Naked Security podcast – listen now!

Stronger encryption standards are improving the privacy of data in motion, but enterprises will need to adapt their security architectures to maintain visibility into network traffic.

Healthcare information security suffers from the inherent weakness of using passwords to guard information. Chip-based smart cards could change that.

Until a report this week, Uber's Surfcam's use was thought to be limited to incidents uncovered in Singapore in 2017.

Researchers report a now-patched DoS vulnerability in Facebook Fizz, its open source implementation of the TLS protocol.

Despite the 2018 crackdown on Fin7, the cybercrime group has been ramping up its efforts with two new malware samples and an attack panel.

Researchers find that companies that refurbish or accept old equipment as donations don't necessarily clean them of data as promised.

A new study shows why security teams must look holistically across cybersecurity, compliance, technology, and human resources to truly address the business effects of workforce risk.

Explore the latest news and expert commentary on Application Security, brought to you by the editors of Dark Reading

Norway's Norsk Hydro, the company ensnared in one of the week's biggest stories – a ransomware attack that crippled its systems – is still in the process of recovering.

Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading

The campaign, codenamed “Bad Tidings,” has sought out victims’ credentials with clever fake landing pages pretending to be the Saudi Arabian Ministry of Interior’s e-Service portal.

Experts from Gartner, Lookout and Google talk enterprise mobile security in this webinar replay.

Researchers said 1 million user sessions could have been exposed to the campaign, which downloads the Shlayer trojan.

Security researchers regularly search IPv4 address space looking for servers with ports exposing vulnerable software. With the massive number of IPv6 addresses, however, they have lost that ability. Can tricks and workarounds save the day?

According to a new report, average and maximum DDoS attack sizes decreased by 85.36% and 23.91%.

Opera lost its Android browser's VPN after it was sold to a Chinese consortium, but now it's back.