In this video conversation, Dark Reading editors discuss an ill-conceived phishing test and a hacktivist attack on a US government agency.

Simple oversights in domain name system (DNS) records are exposing government organizations to all kinds of potential ...

After compromising websites, the Russian state-sponsored threat group is fingerprinting victims, then harvesting information ...

Realm Security today launched SecurityDataPipeline.com, a new educational resource designed to help cybersecurity professionals understand security data pipelines and reduce SIEM costs without ...

Explore the latest news and expert commentary on Insider Threats, brought to you by the editors of Dark Reading ...

Practical guidance on safer search, stronger login security, better executive protection, and other habits that help reduce ...

Google alleges that Android device manufacturer Videostrong ran the operation, which infected set-top boxes and IoT devices ...

Rails maintainers patched a critical Active Storage flaw that could let attackers read sensitive files and write arbitrary ...

An unknown operator appears to have exfiltrated SQL Server backups from the Philippine Overseas Employment Administration in ...

YubiID links identity verification to credential enrollment and recovery, closing a phishing-resistant authentication gap.

Experts warn the same attacks could easily apply to temperature-controlled infrastructure across other critical sectors.

Threat actors have turned reselling cloud access to LLMs into a lucrative business model, with some victims paying $1 million in resource consumption.