DARKReading

The RSA conference in San Francisco always feels like drinking from a fire hose but especially this year at the first in-person RSA since the pandemic began.

Transitive dependencies can complicate the process of developing software bills of materials.

With more staff working remotely, identity, authentication, and access (IAA) has never been more important. Microsoft has a new response.

Cyber mercenaries in countries like India, Russia, and the UAE are carrying out data theft and hacking missions for a wide range of clients across regions, a couple of new reports said.

It didn't have to be this way: So far 2022's tranche of zero-days shows too many variants of previously patched security bugs, according Google Project Zero.

A recent analysis of breaches involving application programming interfaces (APIs) arrives at some eye-popping damage figures, but which companies are most affected, and in what ways?

Malicious ISS module exploitation is the latest trend among threat actors targeting Exchange servers, analysts say.

Titaniam’s ‘State of Data Exfiltration & Extortion Report’ also finds that while over 70% of organizations had heavy investments in prevention, detection, and backup solutions, the majority of victims ended up giving into attackers' demands.

A password link that didn't expire leads to the discovery of exposed personal information at a payments service.

NXM Autonomous Security protects against network-wide device hacks and defends against critical IoT vulnerabilities.