Chris Kubic worked at the National Security Agency for the past 32 years, finishing his tenure as CISO. He talks about lessons learned during his time there and what they mean for the private sector.

In 2020, expect to hear more about smart building security.

These crooks stashed a message in the virus code itelf – we found it, but we don’t know which way to take it!

NordVPN, ExpressVPN, VyprVPN, and IPVanish have formed the VPN Trust Initiative within i2Coalition. It aims at improving digital security for VPN consumers.

Maze exfiltrates data as well as locks down systems. Officials said they don't know yet whether any residents' personal information has been breached.

Version 79 of Chrome is out, and it promises to do a better job of protecting you against phishing sites and credential stuffing attacks.

Congress on Tuesday told Facebook it must put backdoors into its end-to-end encryption, or it’ll be forced to.

A no-tech trick, a la social engineering, can lead to huge corporate security consequences -- and it might just score the criminal a new car.

What cybercrime group FIN7 can teach us about using agile frameworks.

Check out our list of top 10 things to do to protect your organization from the deepening scourge of ransomware.

Ignoring the value in behavioral analytics could leave your data vulnerable to attack. We asked 18 security experts why behavioral analysis should factor into your data protection program.

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading

A new report looks at computer activity in the 50 largest metropolitan areas.

Seventeen bugs could be exploited to stop electrical generation and cause malfunctions at power plants.

Commodity malware and ransomware continue to be the biggest threats, says VMWare Carbon Black.

Mozilla has evolved its Lockbox password tool into a more standard password manager. Find out if Firefox Lockwise is right for you.

Researchers scanned 4,200 Android apps and found many exhibit malicious behavior or have a dangerous level of permissions.

The telecomms company violates the EU’s GDPR by allegedly failing to fully authenticate people phoning up to access their accounts.

Twitter CEO Jack Dorsey has announced a research effort to explore a decentralised version of the microblogging platform.

The new policy addresses how coordinated online abuse often happens in real life: poisonous drips spanning multiple videos/comments.

If you’re logged into Facebook, it will suck up information such as which apps you use to provide “relevant content, including ads.”