Two third-party services left Facebook user data exposed online -- in one case, 540 million records of user comments -- highlighting the ease with which third-party developers can access data and the risk of lax security.

Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading

Discovered by AT&T Alien Labs, new malware Xwo seeking default creds and misconfigurations in MySQL and MongoDB, among other services

Australian law makers have responded very quickly to the Christchurch shootings.

Nvidia has released 13 patches targeting two low-end embedded computing boards.

A Facebook hoax from 2011 is doing the rounds again. Don’t fall for it, do something useful instead.

Any machine that allows SSH login would benefit from the addition of two-factor authentication.

Some 59% of all malicious files detected in the first quarter of 2019 were documents, according to a Barracuda Networks report. Here's how to protect yourself against this growing threat.

All online banks risk giving attackers unauthorized access to personal data, funds, and sensitive information, according to Positive Technologies.

If you’re a Magento admin, stop what you’re doing and patch now.

Spam campaign features obfuscated .zipx archive that unpacks LokiBot attack.

Three waves of DNS hijacking attacks against consumer routers have been linked back to Google Cloud Platform abuse.

<i>The Matrix</i> ushered in a new generation of sci-fi movies and futuristic plotlines with a relentless, seemingly invulnerable set of villains. Twenty years later, that theme is all too familiar to security pros.

The 74 cybercrime groups were offering illicit services - from email spamming tools to stolen credentials - right on Facebook's platform.

Employee theft at SMBs, fighting stalkerware, and a "hacker-proof" new cryptographic library - catch up on the week's infosec news with this roundup!

From sushi and phishing to robots, passwords and ninjas -- and the winners are ...

The attack campaigns have re-routed DNS requests through illicit servers in Canada and Russia.

To make sure a deleted file can't be recovered, you'll need to use a third-party shredding tool. Here's a look at three such free programs: Eraser, File Shredder, and Freeraser.

Lookout Phishing AI, which discovered the attack, says it has been going on since late November.

Cisco re-patched its RV320 and RV325 routers to protect against two high-severity vulnerabilities at the same time reported two new mediums-severity bugs with no fixes.