While everyone waits for BlueKeep to be exploited, another RDP threat is already at the door, according to new research from Sophos.

Brush up on new DDOS defense tricks, 5G network vulnerabilities, and applications of military strategy to cybersecurity.

The group is using malicious versions of WinRAR and other legitimate software packages to infect targets, likely via watering-hole attacks.

You never know when disaster might strike, and being prepared can make all the difference. Tom Merritt suggests five tips for your disaster recovery plan.

You never know when disaster might strike, and being prepared can make all the difference. Tom Merritt suggests five tips for your disaster recovery plan.

Digital transformation initiatives bring a slew of data privacy concerns to US health organizations, according to a Thales report.

For too long, we've focused almost exclusively on keeping out the bad guys rather than what to do when they get in (and they will).

The proliferation of malicious packages in repositories for software developers that rely on typosquatting points to a problem: A reliance on flat namespaces.

Compliance, accidental exposure of credentials, and data control are also primary concerns for senior IT and security managers.

While blockchain technology can offer great opportunities, the hype surrounding it often leads to unrealistic expectations, according to the World Economic Forum.

A sophisticated and growing malvertising attacker is partnering with legitimate ad tech platforms to drop malware at scale.

This week's TechRepublic and ZDNet stories include a breach of Sprint customers' data, notes from the Duo Security 2019 access report, and how execs are taking charge of digital transformation plans.

This week's TechRepublic and ZDNet stories include a breach of Sprint customers' data, notes from the Duo Security 2019 access report, and how execs are taking charge of digital transformation plans.

Identifying tokens and random addresses, meant to create anonymity, do not change in sync on some devices — opening an attack vector.

Lenovo, Acer and five additional server manufacturers are hit with supply-chain bugs buried in motherboard firmware.

As the California Consumer Privacy Act (CCPA) continues to take shape, the state's Senate Committee on the Judiciary voted to advance seven amendments to the law last week but not after making some changes.

New research on password management tools identifies the relative strengths and weaknesses of 12 competing offerings.

Organizations with systems exploitable via the RDP flaw pose an increasing risk to themselves and other organizations, BitSight says.

Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading