A cautionary tale from a pen test gone wrong in an Iowa county courthouse.

Vulnerabilities originally discovered by US government security services have been used by cybercriminals against municipalities, costing taxpayers an estimated $11.5 billion in 2019.

Add a password manager to Nextcloud so your users can start using strong passwords more easily.

100K or so creators in the YouTube car community were targeted by a phishing campaign that captured 2FA codes.

Researchers warn that the Russia-linked APT has freshened up their tools with an improved downloader and more.

Nearly half of office workers said they had their data compromised. Here's why they keep falling for phishing scams.

Seen this month attacking victims in India, the Dtrack malware is bent on financial gain and high-end spying.

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

Most electrical engineering firms are targeted by threat actors of opportunity because of two necessary ingredients: people and computers. These four tips will help keep you safer.

New analysis of the software used by espionage groups linked to Russia finds little overlap in their development, suggesting that the groups are siloed.

Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading

The HHS Office for Civil Rights (OCR) is reiterating that when it comes to safeguarding critical data, healthcare organizations need to know the where, who, what, and how.

Goal is to help websites detect and block bad bot traffic, vendor says.

Overall, Adobe released three patches – one for an “important” flaw and two for critical flaws –in the 2016 and 2018 versions of ColdFusion.

As risk management programs differ from business to business, these factors remain constant.

Despite claiming they were retiring, GandCrab's authors have been linked to the REvile/Sodinokibi ransomware via a technical analysis.

'Tortoiseshell' discovered hosting a phony military-hiring website that drops a Trojan backdoor on visitors.

New inside-out approach will give SMBs a way to buy insurance coverage based on a realistic and ongoing assessment of their risk, company says.

“Oh no! However shall I give away Bitcoin to all my followers?” sobbed a bunch of crooks.

VPN vendor Forcepoint has patched a security flaw that could have given attackers unfettered access to its users’ Windows computers.