Dark Reading

Microsoft today patched 114 CVEs to address the Exchange Server flaws, more than 50 remote code execution vulnerabilities, and one zero-day.

Researchers say an unknown attacker is targeting vulnerable Exchange Servers with a payload hosted on a compromised Exchange Server.

The length of time attackers remain undiscovered in a target network has fallen to 24 days, researchers report, but ransomware plays a role.

Improvements will make site content easier to navigate, faster, and more functional.

With APIs predicted to be the most common attack vector by 2022, an API-first security strategy is critical now more than ever.

Facebook and Google can identify patterns of attack within their own data, but smaller businesses rarely see enough traffic to successfully identify an attack or warn users.

President Biden has nominated Jen Easterly as the new director of CISA and is expected to nominate Chris Inglis as the first national cyber director.

A new campaign abuses legitimate website contact forms to send URLs that ultimately deliver the IcedID banking Trojan.

Jerome Powell tells 60 Minutes that cyberattacks have the potential to do major damage to US financial system.

Researchers build a model to attribute attacks to specific groups based on tactics, techniques, and procedures, and then figure out their next move.

Saint Bot is being used to drop stealers on compromised systems but could be used to deliver any malware.

The SolarWinds attack showed the true meaning of a supply chain breach. And it's the canary in the coal mine for sensitive data on the Web.

Few emerging cybersecurity market segments are garnering more attention than XDR. Here, Omdia highlights its recent research on XDR.

How to build a new cyber strategy for 2021 and beyond.

Aviary is a new dashboard that works with CISA's Sparrow threat detection tool.

The APKPure app store was infected with malware that can download Trojans to other Android devices, researchers report.

Mobile apps to recommend to the people in your life who want to improve their online security and privacy.

Investing in women's cybersecurity careers can bring enormous benefits and help undo some of the significant economic damage wrought by the pandemic.

White-hat hacking event shows yet again why there's no such thing as foolproof security against modern attacks.

Criminals stitch pieces of HTML together and hide them in JavaScript files, researchers report.