A complete bypass of the Kyverno security mechanism for container image imports allows cyberattackers to completely take over a Kubernetes pod to steal data and inject malware.
A variety of initiatives — such as memory-safe languages and software bills of materials — promise more secure applications, but sustained improvements will require that vendors do much better, researchers agree.
Will the bottom falling out of the cryptocurrency market have a profound impact on cybercriminal tactics and business models? Experts weigh in on what to expect.
Its time companies build a multilayered approach to cybersecurity.
How CISOs handle the ethical issues around data breaches can make or break their careers. Dont wait until a breach happens to plot the course forward.
Dark Readings panel of security experts deliver a magnum of bubbly hot takes on what 2023 will look like, featuring evil AIs, WWIII, wild workplace soon-to-be-norms, and more.
The effectiveness of attacks largely depends on organizations distributed denial-of-service defenses.
The custom malware used by the state-backed Iranian threat group Drokbk has so far flown under the radar by using GitHub as a dead-drop resolver to more easily evade detection.
A reliance on CPE names currently makes accurate searching for high-risk security vulnerabilities difficult.
Common mistakes in network configuration can jeopardize the security of highly protected assets and allow attackers to steal critical data from the enterprise.
