Among them, two are critical and six are of high importance.

Recent stats show that the state of third-party cyber-risk and vendor risk management remains largely immature at most organizations.

Cybercriminals are turning their attention away from the C-suite, though they are still targeting users with high levels of access.

Introducing a 'Cleaner Internet'

Facebook has updated ‘tens of thousands of plaintext Instagram passwords ended up in logfile’ to say it was more like a million.

The application developed by a research group allows users to spot possible IoT security problems.

Possible new regulation for the supply chain space, hijacking DNS, and another Facebook privacy misstep. Catch up on the week's news with this roundup!

For the last month, an unknown individual or group has been sharing data and hacking tools belonging to Iranian hacker group APT34.

Mueller report finds that in July 2016, after then-candidate Donald Trump publicly called for Russia to find the 30,000 emails, Russian agents targeted Hillary Clinton's personal office with cyberattacks.

A researcher said that millions of records were leaking Tap30 drivers' names, ID numbers and phone numbers.

Further extend Microsoft's implementation of OpenSSH in Windows 10 by generating your own secure keys.

On the heels of several Facebook data privacy snafus this week - and over the past year - users no longer trust the platform.

There's a lot to know about encryption, and the ins and outs can get confusing. Here's a rundown of what professionals need to know about this fundamental of modern computing.

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading

McAfee, Sophos and Avast are among the antivirus software suites effected.

A simple tweak of the Windows 10 Registry file can eliminate one often overlooked security concern.

The youngster who spent his own money to protect people from the WannaCry virus has pleaded guilty to malware-related cybercrime charges.

More than 23 million people were breached after using the password 123456, according to the UK's National Cyber Security Centre.

The information includes data on all rehab treatments and procedures, linked with patients' names and other info.

How to protect yourself from being *affected* by malware, even if you’re not yourself *infected*.

Don't let social media become the go-to platform for cybercriminals looking to steal sensitive corporate information or cause huge reputational damage.