This week's TechRepublic and ZDNet stories include a breach of Sprint customers' data, notes from the Duo Security 2019 access report, and how execs are taking charge of digital transformation plans.

This week's TechRepublic and ZDNet stories include a breach of Sprint customers' data, notes from the Duo Security 2019 access report, and how execs are taking charge of digital transformation plans.

Identifying tokens and random addresses, meant to create anonymity, do not change in sync on some devices — opening an attack vector.

Lenovo, Acer and five additional server manufacturers are hit with supply-chain bugs buried in motherboard firmware.

As the California Consumer Privacy Act (CCPA) continues to take shape, the state's Senate Committee on the Judiciary voted to advance seven amendments to the law last week but not after making some changes.

New research on password management tools identifies the relative strengths and weaknesses of 12 competing offerings.

Organizations with systems exploitable via the RDP flaw pose an increasing risk to themselves and other organizations, BitSight says.

Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading

Researchers discover a third-party algorithm in multiple high-profile Bluetooth devices exposes users to third-party tracking and data access.

Two months after the alarm sounded warning of a WannaCry-level event, progress in patching exposed Windows systems varies by country and industry.

At Black Hat, analysts from MITRE and Splunk will detail how organizations of many different sizes are leveraging ATT&CK's common language.

Two years after promising to report all HTTP-based web pages as insecure, Mozilla is about to deliver.

Google’s throwing in the towel on XSS Auditor and putting its trust in Trusted Types instead.

Cyber security's comprehensive news site is now an online community for security professionals, outlining cyber threats and the technologies for defending against them.

The Glamoriser Smart Bluetooth straightener offers up yet another example of how not to add a risky product to the Internet of Things (IoT).

Digital transformation initiatives bring a slew of data privacy concerns to US health organizations, according to a Thales report.

The Naked Security Podcast is back. Listen now, and let us know what you think!

The use of compromised accounts to send phishing emails to contacts inside and outside an organization is an increasing security threat.

What will it take to align staff and budget to protect the organization?