Improper handling of a custom URI created a vulnerability, now patched, for users of the Electron-based Slack Desktop client on Windows.

Just as spreadsheets and personal computers created a job boom in the '70s, so too will artificial intelligence spur security analysts' ability to defend against advanced threats.

The bug is remotely exploitable without authentication or user interaction.

Third-party pen tests are part of every comprehensive security plan. Here's how to get the most from this mandatory investment.

Adobe has issued patches for 87 vulnerabilities on Patch Tuesday - the bulk of which exist in Adobe's Acrobat and Reader product.

Intel has disclosed a new class of speculative execution side channel attacks.

Just as every organization security team's needs are unique, so are the reasons for the shortage of candidates for open positions. Here are five strategies to help you close the gap.

It took five months but the Office for Civil Rights' first HIPAA settlement of the year, $3M, stems from a breach involving an unsecured FTP server.

Microsoft releases security updates for some out-of-support systems to fix a bug that could be weaponized as a worm if exploited.

A massive update addresses the breadth of the computing giant's product portfolio.

Microsoft Patch Tuesday security bulletin tackles 22 critical vulnerabilities.

Tweet suggests possible screenshot of stolen city documents and credentials in the wake of attack that took down city servers last week.

Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading

A single flaw allowed attackers — thought to be linked to a government — to target human rights workers and install surveillance software by sending a phone request. The victims did not even have to answer.

A bipartisan resolution would mandate IT and cybersecurity training for all members of Congress, their staff, and employees.

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading

The suit says Rankwave used Facebook user data for targeted marketing and ignored its cease-and-desist letter.

Apple has released its May 2019 security updates, taking iOS to version 12.3 and macOS Mojave to version 10.14.5.

Now fixed, the bug affected some users with multiple accounts running on an iOS device.

Adding more security professionals isn't enough of a cyber strategy, according to new survey results from consulting firm PwC.