What’s that you say – Facebook was asking for the password to your email account? Yes, sometimes it was.

A new report claims that mobile finance apps are littered with security bugs.

Once more unto the breach, dear Facebook Friends of Friends…

Business email compromise group London Blue is back with evolved email domain spoofing tactics and a newfound interest in targets in Asia.

Over 20 models of smartwatches, some bought for kids, allow for creeps to eavesdrop and track users, in spite of a ban.

Have your business try Cynet's Free Threat Assessment that checks for malware, C&C connections, data exfiltration, phishing link access, user credential thefts attempts, etc.

Malicious actors are politely asking potential victims to directly deposit money in their accounts, according to a new Vade Security report.

The permissions iOS apps request from users can turn the devices into spy tools and provide a toehold into the enterprise network, according to new research.

You don't need a VPN server running on a remote host to create a VPN tunnel. With the help of a simple tool, you can create that tunnel with ease. Jack Wallen shows you how.

Successful, secure organizations must take an aggressive, pre-emptive posture if they want true data security.

Don't let those data center Linux servers use the default SSH port. Gain a bit of a security edge by configuring the daemon to use a non-standard port.

After two databases were discovered leaking Facebook data, Facebook and Amazon are both pointing fingers - but researchers say the onus lies on all parties involved as data collection continues to grow.

No. 4 global phone maker, Xiaomi, preinstalled a security app called ‘Guard Provider’ that had a major flaw.

Theranos flamed out in spectacular fashion, but you can still learn from the company's worst practices.

Organizations recently responded to a senator who's hoping to develop a strategy for reducing cybersecurity vulnerabilities in the healthcare sector.

More than 2 million Apache HTTP servers remain at risk for a critical privilege escalation vulnerability.

Spearphishing campaigns from new and established business email compromise (BEC) gangs are stealing from companies using multiple tactics.

Two third-party services left Facebook user data exposed online -- in one case, 540 million records of user comments -- highlighting the ease with which third-party developers can access data and the risk of lax security.

Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading