One privacy bill would override state laws already on the books - like the CCPA - another would only pre-empt laws that conflict with certain provisions.

Feeling creative this holiday season? Submit your caption in the comments, and our panel of experts will reward the winner with a $25 Amazon gift card.

Kaspersky creates a prototype ring you can wear on your finger for authentication.

Investigative journalist Geoff White chats about why now is the right time for his Black Hat Europe Briefing on hackers, journalists, and the ethical ramifications of cybersecurity journalism.

'ZeroCleare' shares some of the same features as its more notorious predecessor, IBM Security says.

Nebraska Medicine is warning that a rogue, former employee accessed patients' medical records, Social Security numbers and more.

The investigation of a major Android banking botnet yields insights about how cybercriminals structure and run an illicit business.

Larger SMBs are more likely to feel targeted by APTs.

The open source platform aims to make password-cracking more manageable and efficient for red teams.

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

More than a third of systems that handle biometric data were hit by at least one malware infection in the third quarter of 2019, according to a new Kaspersky report.

Researchers uncovers “ultimate man-in-the-middle attack” that used an elaborate spoofing campaign to fool a Chinese VC firm and rip off an emerging business.

Listen now!

The industry can only go so far in treating security as a challenge that can be resolved only by engineering.

Yodel’s mobile parcel delivery app was leaking people’s delivery data to others using the app, a security researcher discovered.

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading

The authentication bypass (CVE-2019-19521) is remotely exploitable.

Android’s December 2019 updates arrived this week, patching a small list of system and Qualcomm flaws across the operating system’s two patch levels.

HackerOne has paid out $20,000 to a bounty hunter who discovered a session cookie issue, due to "human error," on the bug bounty platform.

Python developers have once again fallen victim to malicious software libraries lurking in their favourite package manager.

In the face of mounting attacks against critical infrastructure, NERC, which oversees the United States' electrical grid, is retooling how it addresses cybersecurity.