Explore the latest news and expert commentary on Endpoint Security, brought to you by the editors of Dark Reading

MegaCortex uses a compromised domain controller in its attack.

Armed with stolen credentials from another breach or from a misconfigured file, attackers delete developers' repositories on GitHub, Bitbucket, and GitLab, leaving behind ransom notes.

After researchers were able to bypass a file upload validation flaw patch in WP Live Chat, a new patch has been issued.

Scammers are figuring out unique ways of abusing cloud services to make their attacks look more genuine, Netskope says.

From malware-stuffed piracy apps to the Docker breach, get yourself up to date with everything we wrote last week – it’s roundup time.

Singapore’s central bank sent a payment to Canada using blockchain technology last week, in a clear signal that the technology has value.

It went down in flames, with a rogue admin blackmailing vendors and buyers and leaking login credentials and the IP address.

The updated Add-on Policy aims to rid Firefox of third-party malicious code that hides what it’s really up to.

Turla hacking team abuses a legitimate feature of the Exchange server in order to hide out and access all of the target organization's messages.