Assessing supply chains is one of the more challenging third-party risk management endeavors organizations can take on.

The latest data from Malwarebytes show the average Mac sees almost twice as many bad apps as Windows systems, but actual malware continues to be scarce.

Infection vectors were evenly divided among phishing, vulnerability exploitation, and unauthorized credential use in 2019.

Middleware data was exposed, which can create a secondary path for malware through which applications and data can be compromised.

As businesses' daily operations become more dependent on cloud services, ransomware authors will follow to maximize profits. The good news: Many of the best practices for physical servers also apply to the cloud.

The high-severity vulnerability could enable denial of service, privilege escalation and information disclosure.

In charging four Chinese nationals with 2017's Equifax hack this week, the DOJ also said intellectual property - Equifax's own trade secrets - were stolen as part of the hack.

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading

There are 12 critical and five previously disclosed bugs in the February 2020 Patch Tuesday Update.

Researchers found the total cost far exceeded the amount of ransom paid to attackers.

A web-mapping project came across detainees’ prescriptions and other PII that could be used by identity thieves to victimize prisoners.

The indictment suggests the hack was part of a series of major data thefts organized by Chinese military and intelligence agencies.

Cybercriminals double down on successful internet scams, with a focus on phishing, BEC and other defrauding schemes that have proven to work.