Dark Reading

Supply Chain Attacks Could Pose Biggest Threat to Healthcare

04/05/2018
Healthcare organizations often overlook the supply chain, which researchers say is their most vulnerable facet.

How to Build a Cybersecurity Incident Response Plan

04/05/2018
Being hit by a cyberattack is going to be painful. But it can be less painful if you're prepared, and these best practices can help.

Unpatched Vulnerabilities the Source of Most Data Breaches

04/05/2018
New studies show how patching continues to dog most organizations - with real consequences.

Misconfigured Clouds Compromise 424% More Records in 2017

04/04/2018
Cybercriminals are increasingly aware of misconfigured systems and they're taking advantage, report IBM X-Force researchers.

How Gamers Could Save the Cybersecurity Skills Gap

04/04/2018
McAfee shares its firsthand experience on training in-house cybersecurity pros and publishes new data on how other organizations deal with filling security jobs.

Report: White House Email Domains Poorly Protected from Fraud

04/04/2018
Only one Executive Office of the President email domain has fully implemented DMARC, according to a new report.

Criminals Targeting Magento Sites with Brute-Force Password Attacks

04/03/2018
Forcepoint says it is aware of at least 1,000 sites using Magento's e-commerce platform that have been recently compromised.

7 Deadly Security Sins of Web Applications

04/03/2018
The top ways organizations open themselves up to damaging Web app attacks.

New Attack Vector Shows Dangers of S3 Sleep Mode

04/03/2018
Researchers at Black Hat Asia demonstrated how they can compromise the security of a machine as it powers down and wakes up.

Medical Device Security Startup Launches

04/03/2018
Cynerio lands multi-million dollar funding round.

Francisco Partners Buys Bomgar

04/03/2018
Private equity firm Francisco Partners plans to acquire Bomgar, a privileged access and identity management company.

Hudson's Bay Brands Hacked, 5 Million Credit Card Accounts Stolen

04/02/2018
The infamous Carbanak/FIN7 cybercrime syndicate breached Saks and Lord & Taylor and is now selling some of the stolen credit card accounts on the Dark Web.

'Hack the Defense Travel System': DoD Extends its Bug Bounty Program

04/02/2018
The fifth US Department of Defense bug bounty program, launched with HackerOne, will target a DoD enterprise system used by millions.

Qualys Buys 1Mobility Software Assets

04/02/2018
Qualys has purchased the software assets of 1Mobility for an undisclosed sum.

Is Security Accelerating Your Business?

04/02/2018
With an ever-growing list of security and compliance requirements, security can hinder or slow business initiatives. Is your security department stuck in slow gear or can it go faster?

Microsoft Rushes Out Fix for Major Hole Caused by Previous Meltdown Patch

03/30/2018
Issue affects Windows 7 x64 and Windows Server 2008 R2 x64 systems.

Accused LinkedIn, DropBox Hacker Appears in US Court After Diplomatic Battle

03/30/2018
Russian national indicted for the 2012 LinkedIn hack that led to the theft of 117 million passwords has been extradited from the Czech Republic to the US.

10 Women in Security You May Not Know But Should

03/30/2018
The first in a series of articles shining a spotlight on women who are quietly changing the game in cybersecurity.

Under Armour App Breach Exposes 150 Million Records

03/30/2018
A breach in a database for MyFitnessPal exposes information on 150 million users.

The Cybersecurity Mandates Keep On Coming

03/30/2018
There's a good reason for the proliferation of mandates like the one in New York state, but companies may struggle to answer this question: "Are we in compliance?"