Dark Reading

Three weeks after company disclosed two critical vulnerabilities in the workload management utility, many organizations have not patched the technology yet, security vendor says.

Attackers had used the cloud-based infrastructure to target mailboxes and add forwarding rules to learn about financial transactions.

Both companies have done their due diligence in creating connected-device networks, but the pervasiveness of the devices worries some security researchers.

Andariel, designated as a sub-group of the Lazarus Group APT, has historically targeted South Korean organzations.

Terbium Labs' products and services will become part of Deloitte's Detect & Respond lineup, the company confirms.

Older technologies used in industrial and critical infrastructure leave the sector highly vulnerable to attack, but organizations can take steps to better protect themselves.

Wilson Center cybersecurity expert Meg King pinpoints five ambitious steps the administration should take, including a comprehensive national data breach notification protocol.

The federal government is emphasizing cybersecurity regulation, education, and defense strategies this year.

But volume of malware, botnet, and other exploit activity declined because of the Emotet botnet takedown.

In an ironic twist, Cognyte's data alerts customers to third-party data exposures.

Users given control over encryption keys, Google says.

Best practices guide encompasses integrity, hardening, resilience, and monitoring of PLCs in industrial networks.

We lack reliable, representative, actionable data about ransomware's actual scope, scale, and impact. The Ransom Incident Response Network could change that.

Feeling creative? Submit your caption in the comments, and our panel of experts will reward the winner with a $25 Amazon gift card.

Since the attack, it's been revealed that it was down to a single password. Yes, ransomware needs to be on your radar -- but a focus on credentials is vital.

Nearly a score of cybercriminals allegedly worked together to create the Trickbot malware and deploy it against more than a million users, an unsealed indictment claims.

An investigation has revealed company data has been breached in the United States, South Korea, and Taiwan.

Hacking group stole source code to FIFA 21 and the company's Frostbite engine.

A new analysis of iOS and Android apps released to Apple's and Google's app stores over the past five years found many to be deliberately breaking HTTPS protections.

Thanks to recent advancements in access technologies, everyone can apply identity-based authentication and authorization and zero-trust principles for their computing resources.