Malicious actors are politely asking potential victims to directly deposit money in their accounts, according to a new Vade Security report.

The permissions iOS apps request from users can turn the devices into spy tools and provide a toehold into the enterprise network, according to new research.

You don't need a VPN server running on a remote host to create a VPN tunnel. With the help of a simple tool, you can create that tunnel with ease. Jack Wallen shows you how.

Successful, secure organizations must take an aggressive, pre-emptive posture if they want true data security.

Don't let those data center Linux servers use the default SSH port. Gain a bit of a security edge by configuring the daemon to use a non-standard port.

After two databases were discovered leaking Facebook data, Facebook and Amazon are both pointing fingers - but researchers say the onus lies on all parties involved as data collection continues to grow.

No. 4 global phone maker, Xiaomi, preinstalled a security app called ‘Guard Provider’ that had a major flaw.

Theranos flamed out in spectacular fashion, but you can still learn from the company's worst practices.

Organizations recently responded to a senator who's hoping to develop a strategy for reducing cybersecurity vulnerabilities in the healthcare sector.

More than 2 million Apache HTTP servers remain at risk for a critical privilege escalation vulnerability.

Spearphishing campaigns from new and established business email compromise (BEC) gangs are stealing from companies using multiple tactics.

Two third-party services left Facebook user data exposed online -- in one case, 540 million records of user comments -- highlighting the ease with which third-party developers can access data and the risk of lax security.

Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading

Discovered by AT&T Alien Labs, new malware Xwo seeking default creds and misconfigurations in MySQL and MongoDB, among other services

Australian law makers have responded very quickly to the Christchurch shootings.

Nvidia has released 13 patches targeting two low-end embedded computing boards.

A Facebook hoax from 2011 is doing the rounds again. Don’t fall for it, do something useful instead.

Any machine that allows SSH login would benefit from the addition of two-factor authentication.

Some 59% of all malicious files detected in the first quarter of 2019 were documents, according to a Barracuda Networks report. Here's how to protect yourself against this growing threat.

All online banks risk giving attackers unauthorized access to personal data, funds, and sensitive information, according to Positive Technologies.