DNS, rogue employees and phishing/social engineering should be top of the list of threat areas for organizations to address.

As it gets harder for cybercriminals to bypass business email compromises defenses some hackers are switching from email scams to real mail cons. Researchers at Flashpoint said they are monitoring hacker forums where criminals are swapping tips on a growing…

From a WhatsApp-attacking video file to the latest adopter of DNS-over-HTTPS, and everything in between. It’s the weekly security roundup.

The NeverQuest Trojan has been used by cybermuggers to try to weasel millions of dollars out of victims’ bank accounts.

The Russian Government’s campaign to control how its citizens use the internet seems to be gathering steam.

Ad-blockers have figured out a way to block the unblockable – a pernicious tracker technique that hides advertising networks in plain sight.

A lawyer who boasted of making “50 by 50” – as in, $50m by the age of 50 – is now facing a potential 50+ years behind bars.

Warn your employees to avoid the inevitable scams associated with these two holidays, or you risk compromising your company's network.

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading

A newly announced data breach of several popular Catch restaurants stemmed from malware on its point-of-sale (PoS) systems.

Every organization should be paying attention to the attacks targeting financial services systems.

How can you protect your precious corporate endpoints from the mysterious dangers that might await when you're not by their side? Empower home office users with these tips.

In this Q&A, we sit down with Harlan Carvey, Digital Guardian's new Senior Threat Hunter, to dig into how he approaches threat hunting, incident response, and more.

The malware was introduced to the police network via a contractor who was installing a digital display.

The breach, estimated to have affected more than a million customers, came from malicious external actors.

Companies that rely solely on CVE/NVD are missing 33% of disclosed flaws, Risk Based Security says.

Months after the Tushu SDK was found infecting Android apps on Google Play, its operators are back with new evasive techniques.

The info-stealing malware has updated its password-grabbing module.