Organizations without MFA are wide open to attack when employees fall for phishing scams or share passwords. What's holding them back?

IIoT-generated data – calibrations, measurements and other parameters – still need to be stored, managed and shared securely.

Attackers over the past month have been using a rarely seen approach to disrupt services at large organizations in several countries.

Microsoft tackles 74 bugs as part of its November Patch Tuesday security bulletin.

Rogue employees -rather than external threat groups - pose a formidable threat to incident response teams.

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading

Stability of PCI DSS helps companies cope and create more mature security programs, but some parts of the Payment Card Industry's Data Secure Standard continue to cause headaches.

A new Nominet survey shows a familiar disconnect between business and security teams on the matter of cyber preparedness.

Or your small/new channel, or to shut you down if you use an ad blocker, though a clause in its new ToS is leading people to fear the worst.

U.S. Customs agents now must have reasonable cause and suspicion to search traveler devices at points of entry.

Medtronic’s latest problem is in their Valleylab electrosurgical generators used by surgeons things like cauterisation during operations.

Apple has yanked an app from its iTunes App Store that allowed Instagram users to follow their friends’ activities on the social network.

Lots of PHI, low security, and multiple entry points make hospitals the perfect target for hackers and ransomware attacks are up 45% in Q3.

Perfection is impossible, and pretending otherwise just makes things worse. Instead, make risk-based decisions.

IBM's Chief People Hacker Stephanie "Snow" Carruthers describes how criminals use caller ID spoofing to get your private data.

In iOS 13.2, you can opt out of Siri voice review requests and delete recording history from your Apple devices.

Hospitals and IoT device manufacturers must take a dual approach in securing connected telehealth devices.