It took five months but the Office for Civil Rights' first HIPAA settlement of the year, $3M, stems from a breach involving an unsecured FTP server.

Microsoft releases security updates for some out-of-support systems to fix a bug that could be weaponized as a worm if exploited.

A massive update addresses the breadth of the computing giant's product portfolio.

Microsoft Patch Tuesday security bulletin tackles 22 critical vulnerabilities.

Tweet suggests possible screenshot of stolen city documents and credentials in the wake of attack that took down city servers last week.

Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading

A single flaw allowed attackers — thought to be linked to a government — to target human rights workers and install surveillance software by sending a phone request. The victims did not even have to answer.

A bipartisan resolution would mandate IT and cybersecurity training for all members of Congress, their staff, and employees.

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading

The suit says Rankwave used Facebook user data for targeted marketing and ignored its cease-and-desist letter.

Apple has released its May 2019 security updates, taking iOS to version 12.3 and macOS Mojave to version 10.14.5.

Now fixed, the bug affected some users with multiple accounts running on an iOS device.

Adding more security professionals isn't enough of a cyber strategy, according to new survey results from consulting firm PwC.

Learn to set malware lures, pinpoint unintentional but identifying human behaviors, and detect industrial control system attacks via sensor noise.

Security professionals are willing to share intel with their peers and the government if such sharing improved their ability to detect cyber threats, according to an IronNet survey.

Medical IoT devices carry significant cybersecurity risks, according to a Forescout report.

The transition to Windows 10 doesn't need to be a sprint. Organizations can still take advantage of the security in Windows 7 while gaining added management flexibility from the newer OS.

Attackers have been tampering with TLS signatures at a scale never before seen using the cipher-stunting approach.

A major gap exists between the perception and reality of online security safety, according to Google Registry and The Harris Poll.