darkreading

Adversaries can exploit CVE-2024-6769 to jump from regular to admin access without triggering UAC, but Microsoft says it's not really a vulnerability.

It is imperative for executives and board members to know who their top allies are, and how to best leverage them to successfully navigate a crisis and minimize the harm caused by a breach.

As Superman has kryptonite, software has weaknesses — with misconfigurations leading the pack.

The number of memory bugs in Android declined sharply after Google began transitioning to Rust for new features in its mobile OS.

The vendor says there are no reports of the flaws being exploited in the wild nor any public exploit codes currently available.

Companies in this industry vertical tend toward large financial transactions with partners, suppliers, and customers.

The AI Incident Reporting and Security Enhancement Act would allow NIST to create a process for reporting and tracking vulnerabilities found in AI systems.

British Transport Police and Network Rail are investigating the incident, in which bad actors posted Islamophobic messages on the transport system's network.

Beware that friendly text from the IT department giving you an "update" about restoring your broadband connectivity.

Developers need to do more than scan code and vet software components, and ops should do more than just defend the deployment pipeline.

Developers need to do more than scan code and vet software components, and ops should do more than just defend the deployment pipeline.

An environment that values creativity, continuous learning, and calculated risk-taking can prevent boredom while building a resilient, adaptable team ready to tackle whatever challenges come their way.

Researchers have uncovered one of the first examples of threat actors using artificial intelligence chatbots for malware creation, in a phishing attack spreading the open source remote access Trojan.

Who needs advanced malware when you can take advantage of a bunch of OSS tools and free cloud services to compromise your target?

The latest draft version of NIST's password guidelines simplifies password management best practices and eliminates those that did not promote stronger security.