Author: Dark Reading Staff, Dark Reading

New data from security training provider shows half of untrained users in consulting, energy, and healthcare industries fall for phishing attacks.

The new open source security-as-code platform will help developers and security teams automatically detect security policy violations across the organization's cloud infrastructure.

Unsophisticated campaigns use off-the-shelf RATs and other tools to exfiltrate data and demand a ransom to keep it private.

Fraudster innovation will continue to drive successful phishing, business email compromise, and socially engineered attacks, researchers say.

Fraudster allegedly passed off refurbished, modified Cisco equipment as new to hospitals, schools, and even the military.

Cybersecurity teams continue to emphasize intrusion prevention over incident response, despite US government action.

Apple's new Lockdown Mode protects devices targeted by sophisticated state-sponsored mercenary spyware attacks.

The US Department of Commerce's National Institute of Standards and Technology (NIST) announced the first group of encryption tools that will become part of its post-quantum cryptographic standard.

A widespread campaign uses more than 24 malicious NPM packages loaded with JavaScript obfuscators to steal form data from multiple sites and apps, analysts report.

The now-patched bug allows an attacker to gain full access to a user's Amazon files.