darkreading

The more we use the cloud, the more maintaining browser security becomes crucial.

Russia has cast aside its focus on civilian infrastructures and is instead targeting Ukraine's military operations in myriad ways.

The cohort's variety of individual tools covers just about any operating system it could possibly wish to attack.

Accenture researcher undercut WHfB's default authentication using open source Evilginx adversary-in-the-middle (AitM) reverse-proxy attack framework.

A painful recovery from arguably one of the worst IT outages ever continues, and the focus is shifting to what can be done to prevent something similar from happening again.

An exploit sold on an underground forum requires user action to download an unspecified malicious payload.

A unified standard is essential for realizing the full potential of SBOMs in enhancing software supply chain security.

Here's a dose of reality from those on the frontlines and how they're coping.

Newly discovered "FrostyGoop" is the first ICS malware that can communicate directly with operational technology systems via the Modbus protocol.

The Israeli security startup's technology helps organizations map existing accounts and credentials to existing employees to identify those that should be removed.

The authorities intend to send a message to these cybercrime groups that their criminal offenses and ransomware attacks are not worth the fallout.

Apps like Tinder, Bumble, Grindr, Badoo, OKCupid, MeetMe, and Hinge all have API vulnerabilities that expose sensitive user data, and six allow a threat actor to pinpoint exactly where someone is.