The kit's authors demonstrate a knowledge of Verizon's infrastructure.

The security services company releases a distribution of 140 programs for penetration testers who need to launch attacks and tools from an instance of Windows.

Security has tended to be a bolt-on to enterprise software, but Sqreen hopes to make it part of the normal way developers work.

When selecting targets, attackers often consider total cost of 'pwnership' -- the expected cost of an operation versus the likelihood of success. Defenders need to follow a similar strategy.

The latest breach appears to have impacted at least two million credit card numbers across six restaurants, for 10 months.

People who understand information governance, privacy, and security should be active participants on the distributed ledger technology implementation team to ensure success.

New data from ISC(2) shows younger women are making more money than
in previous generations in the field - but overall gender pay disparity persists.

Attackers these days want to ‘own’ your entire system, including partners and suppliers.

Explore the latest news and expert commentary on Application Security, brought to you by the editors of Dark Reading

Android’s April update includes two critical CVE-level patches among a total of 11 affecting handsets running versions 7, 8, and 9.

PoS malware affected some Buca di Beppo, Earl of Sandwich, Planet Hollywood, Chicken Guy!, Mixology and Tequila Taqueria locations.

Over 13,500 internet-connected storage devices have been exposed online by users who didn’t set passwords for them.

They placed unobtrusive stickers that drivers wouldn’t see but would fool autopilot into thinking the lane was veering off to the left.

Some 73% of IT professionals said insider attacks have become more frequent in the past year, according to a Bitglass report.

Multiple data sources, data sharing agreements, and data inventory are some of the challenges of managing data privacy cited in a survey from Integris Software.

In a time of disruption in the security and tech worlds, cybersecurity professionals can't afford to become complacent - even in the face of a skills shortage.

But executives aren't confident in the accuracy of cybersecurity assessment data received from their vendors, a new study shows.