Explore the latest news and expert commentary on Cyber Risk, brought to you by the editors of Dark Reading

The main source of infection on industrial control systems was the internet, researchers at Kaspersky Lab found in a new report.

A simple misconfiguration could expose the IP addresses of dark web sites.

Mozilla’s browser is waving goodbye to millions of XP holdouts.

A macOS App called Adware Doctor blocks ads, but shares user browser history with a China-based domain.

The teenager made bomb threats to schools, and to a flight between the UK and San Francisco while it was in mid-air.

The Necurs Botnet, DarkHydrus and other threat actors are turning to the inconspicuous files.

Richard Gregory Bauer allegedly weaseled private information out of the women on Facebook by pretending to be working on a class project.

The Threatpost team breaks down the biggest news from the week ended Sept. 7.

The data-driven nature of IR can provide many of the reporting requirements governing industrial control system safety, finance, consumer privacy, and notifications.

The airline is deeply sorry for its worst-ever cyberattack, which has affected 380,000 customers.

The airline said information like name, address and bank card details like CVC code were compromised.

'Big Bang' group returns with new campaign after last year's RAT attacks.

An exhaustive scan shows hundreds of thousands of websites potentially exposing sensitive data such as database passwords, API keys and so on.

These methods may not yet be on your security team's radar, but given their impact, they should be.

The newest version of TLS won't break everything in your security infrastructure, but you do need to be prepared for the changes it brings.

The fact that the app likely has been exfiltrating data for years is rather f#@&'d up, says the security researcher who reported the issue to Apple one month ago.