For years, Facebook asked some new users for email passwords, then grabbed their contacts without consent (or any way to stop the process).

The containerisation platform has asked 190k users to change their passwords after hackers gained access to a database of personal data.

Cybercriminals continue to target intellectual property, putting companies at risk for financial and brand reputation hits, according to McAfee.

The Good Guys from the Cyber Threat Alliance just published a report to help you keep the Bad Guys out of your network

Deep Instinct analysts test three code injection methods and a custom-built Mach-O loader to load malicious files from memory.

A dependency on third-party cloud and hosting providers leaves businesses more vulnerable to potential cyber threats, according to RiskRecon and the Cyentia Institute.

Machine learning and artificial intelligence are helping threat-intelligence firms cover a greater area of the darknet, but human analysts will always be necessary, experts say.

Explore the latest news and expert commentary on Cyber Risk, brought to you by the editors of Dark Reading

When is an address bar not an address bar? When it’s a fake.

Another month is here and Android finds itself with a mixture of critical and high vulnerabilities.

An Ohio parish lost a whopping $1.75 million after attackers breached two employees' email accounts - and then tricked other employees into sending wire transfers to a fraudulent bank account.

A bug in the popular anti-piracy framework allows a side-channel attack on premium content.

Phishing simulation training? Audits? Incentivizing training? We talked to 18 infosec leaders and asked them what the best tools and techniques for employee security awareness training are.

Explore the latest news and expert commentary on Cloud Security, brought to you by the editors of Dark Reading

Companies that get ahead of the January 2020 data privacy deadline can minimize the risk of sanctions and also gain a competitive advantage in the marketplace.

A recently-patched critical flaw in Oracle WebLogic is being actively exploited to peddle a new ransomware variant, which researchers call "Sodinokibi."

A scam version of the actor convinced a woman he was in love with her.

An exploit of the vulnerability offers attackers a ransomware surface that doesn't need email.

Intellectual property and personally identifiable information tie for the type of data IT practitioners are worried about losing.