Dark Reading

Be wary of being pestered into making a bad decision. As digital applications proliferate, educating users against social engineering attempts is a key part of a strong defense.

A stunning three-quarters of companies are looking to consolidate their security products this year, up from 29% in 2020, suggesting fiercer competition among cybersecurity vendors.

Malware-laced ads are hauling in tens of millions of dollars in revenue for operators of pirated-content sites — posing a real risk to enterprises from remote employees.

When an organization fully embraces the cloud, traditional endpoints become disposable. Organizations must adapt their security strategy for this reality.

Several models of EZVIZ cameras are open to total remote control by cyberattackers, and image exfiltration and decryption.

Authorities are cracking down on persistent cybercriminal attacks from APTs associated with Iran's Islamic Revolutionary Guard Corps.

Solution addresses compliance challenges in complex landscapes

The entire security team should share in the responsibility to secure sensitive data.

Oversubscribed round validates company's data-first approach to solving cloud security and privacy issues for global businesses thwarting data breaches and ransomwar

Access tokens for other Teams users can be recovered, allowing attackers to move from a single compromise to the ability to impersonate critical employees, but Microsoft isn't planning to patch.

New executive order stops short of mandating NIST's guidelines, but recommends SBOMs for federal agencies across government.

This Tech Tip walks through the steps to set up signed commits with SSH keys stored in 1Password.

Researchers link the APT to an attack on a Hong Kong university, which compromised multiple key servers using advanced Linux malware.

With enough passion, intelligence, and effort, anyone can be a successful cybersecurity professional, regardless of education or background.

Interactive intrusion campaigns jumped nearly 50%, while the breakout time between initial access and lateral movement shrank to less than 90 minutes, putting pressure on defenders to react quickly.

Honeypot activity exposed two credentials that the threat actor is using to host and distribute malicious container images, security vendor says.

Twitter did not know what data it had or who had access to it, Peiter "Mudge" Zatko told Congressional lawmakers during a Senate panel hearing.