Recent supply chain attacks involving self-propagating worms have spread far, but the damage and long-term impact is hard to ...

Security and privacy concerns are growing. The Electronic Frontier Foundation sees encryption as the "best way" to protect ...

Malicious "skills" and persnickety configuration are just a few issues that security researchers have found when installing ...

KEV Collider combines data from multiple open-source vulnerability frameworks to help cybersecurity teams assess which issues ...

The forensic tool's driver was signed with a digital certificate that expired years ago, but major security gaps allowed ...

Someone used AI to build a Web platform, which then did something predictable and preventable: It exposed all its data ...

Hacktivist group claims a 2.3-terabyte data breach exposes information of 36 million Mexicans, but no sensitive accounts are ...

By tapping the unusual .scr file type, attackers leverage "executables that don't always receive executable-level controls," ...

A third of the "flipped" CVEs affect edge devices, leading one researcher to conclude, "Ransomware operators are building ...

APT28's attacks use specially crafted Microsoft Rich Text Format (RTF) documents to kick off a multistage infection chain to deliver malicious payloads.

Russian and Chinese nation-state attackers are exploiting a months-old WinRAR vulnerability, despite a patch that came out ...

Dark Reading asked readers about agentic AI attacks, advanced deepfake threats, board recognition of cyber-risk, and password ...