News

Department of State sign in front of a building

Cyberattacks & Data Breaches

Chinese Hacker Pwns 81K Sophos Devices With Zero-Day Bug Chinese Hacker Pwns 81K Sophos Devices With Zero-Day

The US State Department has offered a $10 million reward for Guan Tianfeng, who has been accused of developing and testing a critical SQL injection flaw with a CVSS score of 9.8 used in Sophos attacks.

byKristina Beek, Associate Editor, Dark Reading

Dec 11, 2024

|

1 Min Read

Krispy Kreme doughnut assortment on plate

Cyberattacks & Data Breaches

Krispy Kreme Doughnut Delivery Gets Cooked in Cyberattack Krispy Kreme Doughnut Delivery Gets Cooked in Cyberattack

byBecky Bracken, Senior Editor, Dark Reading

Dec 11, 2024

2 Min Read

A glowing purple and pink key, with dots and numbers in the background

Symmetrical Cryptography Pioneer Targets the Post-Quantum Era Symmetrical Cryptography Pioneer Targets the Post-Quantum Era

byKristina Beek, Associate Editor, Dark Reading

Dec 11, 2024

3 Min Read

A woman sitting at a laptop and holding a mobile device, the screens of both displaying a green check mark in a circle

Cyberattacks & Data Breaches

Researchers Crack Microsoft Azure MFA in an Hour Researchers Crack Microsoft Azure MFA in an Hour

byElizabeth Montalbano, Contributing Writer

Dec 11, 2024

4 Min Read

A globe overlaid with code

Cyberattacks & Data Breaches

Governments, Telcos Ward Off China's Hacking Typhoons Governments, Telcos Ward Off China's Hacking Typhoons

byRobert Lemos, Contributing Writer

Dec 11, 2024

5 Min Read

Identity & Access Management Security

Snowflake Rolls Out Mandatory MFA Plan Snowflake Rolls Out Mandatory MFA Plan

byDark Reading Staff

Dec 10, 2024

1 Min Read

Cables plugged into a network switch

Cyberattacks & Data Breaches

FCC Proposes New Cybersecurity Rules for Telecoms

FCC Proposes New Cybersecurity Rules for Telecoms

byJennifer Lawinski, Contributing Writer

A patchwork quilt

Application Security

Actively Exploited Zero-Day, Critical RCEs Lead Microsoft Patch Tuesday

Microsoft Fixes Active Zero-Day, Critical RCEs on Patch Tuesday

byTara Seals, Managing Editor, News, Dark Reading

The words "Zero-day exploit" on a computer keyboard.

Cyberattacks & Data Breaches

'Termite' Ransomware Likely Behind Cleo Zero-Day Attacks

'Termite' Ransomware Likely Behind Cleo Zero-Day Attacks

byJai Vijayan, Contributing Writer

The Debating Chamber of the Scottish Parliament in Holyrood, Edinburgh, Scotland

Cyberattacks & Data Breaches

Scottish Parliament TV at Risk From Deepfakes

Scottish Parliament TV at Risk From Deepfakes

byKristina Beek, Associate Editor, Dark Reading

Letters AWS in white with a yellow arrow pointing to the right underneath against a black backdrop

Endpoint Security

Cybercrime Gangs Abscond With Thousands of Orgs' AWS Credentials

Cybercrime Gangs Abscond With 1000s of AWS Credentials

byElizabeth Montalbano, Contributing Writer

Cyberattacks & Data Breaches

Sprawling 'Operation Digital Eye' Attack Targets European IT Orgs

'Operation Digital Eye' Attack Targets European IT Orgs

byNate Nelson, Contributing Writer

The words "zero-day" written in a line of code on a computer screen

Application Security

Microsoft NTLM Zero-Day to Remain Unpatched Until April

Microsoft NTLM Zero-Day to Remain Unpatched Until April

byJai Vijayan, Contributing Writer

Gloved hand stealing money out of man's shirt pocket

Cyberattacks & Data Breaches

Millionaire Airbnb Phishing Ring Busted Up by Police

Millionaire Airbnb Phishing Ring Busted Up by Police

byBecky Bracken, Senior Editor, Dark Reading

QR code displayed on a mobile device next to lines of code with the outline of a shield with a padlock in the middle on top

Endpoint Security

Attackers Can Use QR Codes to Bypass Browser Isolation

Attackers Can Use QR Codes to Bypass Browser Isolation

byElizabeth Montalbano, Contributing Writer

a patchwork quilt

Vulnerabilities & Threats

Google Launches Open Source Patch Validation Tool

Google Launches Open Source Patch Validation Tool

byJennifer Lawinski, Contributing Writer

Person with hands cuffed behind back

Cyberattacks & Data Breaches

Texas Teen Arrested for Scattered Spider Telecom Hacks

Texas Teen Arrested for Scattered Spider Telecom Hacks

byBecky Bracken, Senior Editor, Dark Reading

Still of Arnold Schwarzenegger's face from the 1990 movie Total Recall

Application Security

Microsoft Expands Access to Windows Recall AI Feature

Microsoft Expands Access to Windows Recall AI Feature

byTara Seals, Managing Editor, News, Dark Reading

Library of Congress Offers AI Legal Guidance to Researchers

Library of Congress Offers AI Legal Guidance to Researchers

byRobert Lemos, Contributing Writer

Great Siege Tunnels, Gibraltar, featuring a tableau of seven cannons overlooking Spanish positions

Сloud Security

Russia's 'BlueAlpha' APT Hides in Cloudflare Tunnels

Russia's 'BlueAlpha' APT Hides in Cloudflare Tunnels

byTara Seals, Managing Editor, News, Dark Reading

Vulnerabilities & Threats

Bypass Bug Revives Critical N-Day in Mitel MiCollab

Bypass Bug Revives Critical N-Day in Mitel MiCollab

byNate Nelson, Contributing Writer

Abstract image of red human figure surrounded by black human figures

Threat Intelligence

Trojan-as-a-Service Hits Euro Banks, Crypto Exchanges

Trojan-as-a-Service Hits Euro Banks, Crypto Exchanges

byBecky Bracken, Senior Editor, Dark Reading

Red hooded figures with blacked-out faces with three yellow stars in the upper left of the frame

Cyberattacks & Data Breaches

'Earth Minotaur' Exploits WeChat Bugs, Sends Spyware to Uyghurs

'Earth Minotaur' Exploits WeChat Bugs, Sends Spyware to Uyghurs

byElizabeth Montalbano, Contributing Writer

A digital map of Africa, overlaid with padlocks

Cyberattacks & Data Breaches

African Law Enforcement Nabs 1,000+ Cybercrime Suspects

African Law Enforcement Nabs 1,000+ Cybercrime Suspects

byRobert Lemos, Contributing Writer

American and Chinese flags on computer keyboard keys

Cyberattacks & Data Breaches

CISA Issues Guidance to Telecom Sector on Salt Typhoon Threat

CISA Issues Guidance to Telecom Sector on Salt Typhoon Threat

byJai Vijayan, Contributing Writer

The title screen for 1988's "Spy vs. Spy" arcade game

Threat Intelligence

Russian FSB Hackers Breach Pakistani APT Storm-0156

Russian FSB Hackers Breach Pakistani APT Storm-0156

byNate Nelson, Contributing Writer

Vulnerabilities & Threats

Veeam Urges Updates After Discovering Critical Vulnerability

Veeam Urges Updates After Discovering Critical Vulnerability

byKristina Beek, Associate Editor, Dark Reading

Digital illustration of a winged horse with two horns on its head

Endpoint Security

Pegasus Spyware Infections Proliferate Across iOS, Android Devices

Pegasus Spyware Infections Proliferate Across iOS, Android Devices

byElizabeth Montalbano, Contributing Writer

Concept art of the interior network in a phone, with cybersecurity

Mobile Security

SecureG, CTIA Project Secures Business Phone Calls

SecureG, CTIA Project Secures Business Phone Calls

byJennifer Lawinski, Contributing Writer

Concept illustration of a content delivery network on a world map

Application Security

Misconfigured WAFs Heighten DoS, Breach Risks

Misconfigured WAFs Heighten DoS, Breach Risks

byJai Vijayan, Contributing Writer

Cybersecurity Operations

Note From the Editor-in-Chief

Note From the Editor-in-Chief

byKelly Jackson Higgins, Editor-in-Chief, Dark Reading

Vulnerabilities & Threats

Decade-Old Cisco Vulnerability Under Active Exploit

Decade-Old Cisco Vulnerability Under Active Exploit

byKristina Beek, Associate Editor, Dark Reading

Group of co-workers talking together while sitting in a circle in an office

Vulnerabilities & Threats

Cyber-Unsafe Employees Increasingly Put Orgs at Risk

Cyber-Unsafe Employees Increasingly Put Orgs at Risk

byKristina Beek, Associate Editor, Dark Reading

Gold and black spider sitting on a web

Cyberattacks & Data Breaches

Venom Spider Spins Web of New Malware for MaaS Platform

Venom Spider Spins Web of Malware for MaaS Platform

byElizabeth Montalbano, Contributing Writer

A gray wolf standing in the snow

'White FAANG' Data Export Attack: A Gold Mine for PII Threats

'White FAANG' Data Export Attack: A Gold Mine for PII Threats

byNate Nelson, Contributing Writer

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.