A new malicious campaign is spreading LokiBot and NanoCore trojans under the guise of an ISO file claiming to be an invoice.

Gain more security with your open source FTP server with the help of OpenSSL and TLS.

With the cyber conflict between the United States and Iran ramping up, companies traditionally targeted by the countries — such as those in the oil and gas and financial industries — need to bolster their security efforts, experts say.

Be prepared by following these five steps so you don't have to pay a ransom to get your data back.

Researchers have found samples of malware that targets a recently-disclosed, unpatched MacOS vulnerability.

Data breaches remain prevalent in the enterprise. Learn what companies are doing right--and wrong--when it comes to prevention.

A data breach at this company may have started as early as nine years ago, in the summer of 2010.

Here’s a way to keep secrets safe in memory, even in a world of hardware-level leakage due to tricks like Rambleed, Spectre and more.

Security Hub aims to manage security across an AWS environment; Control Tower handles security and compliance for multi-account environments.

Explore the latest news and expert commentary on Cloud Security, brought to you by the editors of Dark Reading

A nation-state group possibly out of China has attacked cell carrier networks in search of data on high-value individuals.

Steve Schmidt says limiting access to data has dramatically changed the security posture across Amazon Web Services.

Search engine optimization firm plugs a hole in its platform that allowed attackers to open a reverse shell that could be used to attack the service.

Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading

Google has expanded its internet safety guide for children with techniques and games to help them be more info-literate online.

Maintainers of the world’s most popular open source media player, VLC, has issued the biggest single set of security fixes in the program’s history.

Social Engineered, dedicated to the “Art of Human Hacking,” was gutted, with 55,121 users’ details leaked on the same day as the hack.

Those things drop out of pockets at the worst times. Like, say, when you’re hurling a bomb at a brick-and-mortar that you’ve also DDoSed.

Foster Warriors is a new nonprofit initiative focused on helping foster kids find a place in the world, and especially in the world of security. Join us!

After being hit by a ransomware attack, the second Florida city this month has opted to pay hackers their requested ransom.