Theranos flamed out in spectacular fashion, but you can still learn from the company's worst practices.

Organizations recently responded to a senator who's hoping to develop a strategy for reducing cybersecurity vulnerabilities in the healthcare sector.

More than 2 million Apache HTTP servers remain at risk for a critical privilege escalation vulnerability.

Spearphishing campaigns from new and established business email compromise (BEC) gangs are stealing from companies using multiple tactics.

Two third-party services left Facebook user data exposed online -- in one case, 540 million records of user comments -- highlighting the ease with which third-party developers can access data and the risk of lax security.

Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading

Discovered by AT&T Alien Labs, new malware Xwo seeking default creds and misconfigurations in MySQL and MongoDB, among other services

Australian law makers have responded very quickly to the Christchurch shootings.

Nvidia has released 13 patches targeting two low-end embedded computing boards.

A Facebook hoax from 2011 is doing the rounds again. Don’t fall for it, do something useful instead.

Any machine that allows SSH login would benefit from the addition of two-factor authentication.

Some 59% of all malicious files detected in the first quarter of 2019 were documents, according to a Barracuda Networks report. Here's how to protect yourself against this growing threat.

All online banks risk giving attackers unauthorized access to personal data, funds, and sensitive information, according to Positive Technologies.

If you’re a Magento admin, stop what you’re doing and patch now.

Spam campaign features obfuscated .zipx archive that unpacks LokiBot attack.

Three waves of DNS hijacking attacks against consumer routers have been linked back to Google Cloud Platform abuse.

<i>The Matrix</i> ushered in a new generation of sci-fi movies and futuristic plotlines with a relentless, seemingly invulnerable set of villains. Twenty years later, that theme is all too familiar to security pros.

The 74 cybercrime groups were offering illicit services - from email spamming tools to stolen credentials - right on Facebook's platform.

Employee theft at SMBs, fighting stalkerware, and a "hacker-proof" new cryptographic library - catch up on the week's infosec news with this roundup!

From sushi and phishing to robots, passwords and ninjas -- and the winners are ...