An unprecedented connection between the North Korean APT and the crimeware giant spells trouble for global banks and other cybercrime targets.

While hardware-level attacks are high, only 59% of companies have implemented a hardware security strategy, Dell and Forrester found.

New ESG research points to fundamental problems, a need for scalable security data pipelines, and a migration to the public cloud.

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading

The Intel attack uses a similar technique that gamers commonly use to overclock their CPUs.

Machine learning and behavioral detection are necessary to catch threats, WatchGuard says in a new report. Meanwhile, network attacks have risen, especially against older vulnerabilities, such as those in Apache Struts.

The tactics used by the latest version of the Vega cryptolocker program indicates the code may have been stolen from its authors and is now being used for destructive attacks, a new report suggests.

Use of two-factor authentication has nearly doubled in the past two years , pointing to a new wave of acceptance.

Researchers with SentinelLabs say they have found one of "the first known links between cybercrime groups and nation-state actors."

A series of security enhancements seek to protect users from phishing and warn them when credentials have been compromised.

Deficiencies in the Social Security Administration's ability to protect sensitive data could impact the confidentiality and integrity of its systems and personally identifiable information, a new report says.

Deficiencies in the Social Security Administration's ability to protect sensitive data could impact the confidentiality and integrity of its systems and personally identifiable information, a new report says.

Signal, the encrypted messaging platform, is planning to launch an upgraded secure group messaging and communities function. Signal’s groups are private, meaning that the service itself doesn’t keep a record of a user’s group memberships, group titles, group…

In nearly every security environment, competing priorities are a constant battleground. Here's how to keep the focus on what's important.

Apple fixes bug that allows nearby hackers to render iPads and iPhones unusable.

Several toys that were tested have been found lacking authentication measures, opening them up to an array of insidious attacks.

The high cost of doing business in California's San Francisco Bay Area is just one factor driving infosec companies - established and and startups, alike - to pursue their fortunes elsewhere. Here's where many are going.

The malware affected 100 different online publishers.

Spam calls drive us all crazy. Here are four ways to stop robocalls and other unsolicited phone calls.

Researchers were able to extract AES encryption key using SGX's voltage-tuning function.

North Korea's Lazarus Group - of Sony breach and WannaCry fame - is among the first customers.