CISO Corner

Security Firm's North Korean Hacker Hire Not an Isolated Incident

Sep 19, 2024

How Shifts in Cyber Insurance Are Affecting the Security Landscape

Sep 18, 2024

NFL Teams Block & Tackle Cyberattacks in a Digital World

Sep 13, 2024

SOAR Is Dead, Long Live SOAR

Sep 11, 2024

FBI Leads Takedown of Chinese Botnet Impacting 200K Devices

Once a user's device is infected as part of an ongoing Flax Typhoon APT campaign, the malware connects it to a botnet called Raptor Train, initiating malicious activity.

US and Taiwan flags

Cyberattacks & Data Breaches

Phishing Espionage Attack Targets US-Taiwan Defense Conference

Sep 19, 2024

Three men in reflective jackets standing around a laptop

Application Security

Contractor Software Targeted via Microsoft SQL Server Loophole

Sep 18, 2024

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

Vulnerabilities & Threats

PODCAST

Dark Reading Confidential: Pen Test Arrests, Five Years Later

Episode 3: On September 11, 2019, two cybersecurity professionals were arrested in Dallas County, Iowa and forced to spend the night in jail -- just for doing their jobs. Gary De Mercurio and Justin Wynn. Despite the criminal charges against them eventually being dropped, the saga that night five years ago continues to haunt De Mercurio and Wynn personally and professionally. In this episode, the pair and Coalfire's CEO Tom McAndrew share how the arrest and fallout has shaped their lives and careers as well as how it has transformed physical penetration tests for the cybersecurity industry as a whole.

Latest News

A microchip in the shape of the Chinese flag surrounded by a device's internal hardware

Vulnerabilities & Threats

FBI Leads Takedown of Chinese Botnet Impacting 200K Devices

byDark Reading Staff

North Korean flag as the key on a computer keyboard

Vulnerabilities & Threats

Security Firm's North Korean Hacker Hire Not an Isolated Incident

byElizabeth Montalbano, Contributing Writer

Cyberattacks & Data Breaches

Phishing Espionage Attack Targets US-Taiwan Defense Conference

byNate Nelson, Contributing Writer

Three men in reflective jackets standing around a laptop

Application Security

Contractor Software Targeted via Microsoft SQL Server Loophole

byDark Reading Staff

Multifunction army pocket knife on white background

Cyberattacks & Data Breaches

Packed With Features, 'SambaSpy' RAT Delivers Hefty Punch

byJai Vijayan, Contributing Writer

A person holding a phone, scanning a QR code

Threat Intelligence

QR Phishing Scams Gain Motorized Momentum in UK

byKristina Beek, Associate Editor, Dark Reading

Cybersecurity Operations

FCC: AT&T Didn't Adequately Protect Customers' Cloud Data

byDark Reading Staff

Hands in a shadow against blurred bright colored lights holding a device with "servicenow" displayed on the screen

Сloud Security

Thousands of ServiceNow KB Instances Expose Sensitive Corporate Data

byElizabeth Montalbano, Contributing Writer

Cybersecurity Analytics

Infostealers: An Early Warning for Ransomware Attacks

byNate Nelson, Contributing Writer

Cyberattacks & Data Breaches

As Geopolitical Tensions Mount, Iran's Cyber Operations Grow

byRobert Lemos, Contributing Writer

More News

Latest Commentary

Picture of Venkat Gopalakrishnan

Venkat Gopalakrishnan

AI and Data Science Leader, Cybersecurity Expert

Cyber Risk

An AI-Driven Approach to Risk-Scoring Systems in Cybersecurity

Picture of David Bennett

David Bennett

CEO, Object First

Cyber Risk

How Shifts in Cyber Insurance Are Affecting the Security Landscape

Picture of Sébastien Cano

Sébastien Cano

Senior Vice President, Cloud Protection & Licensing Activities, Thales

Vulnerabilities & Threats

The Current Cybersecurity Landscape: New Threats, Same Security Mistakes

Picture of John Klossner, Cartoonist

John Klossner, Cartoonist

ICS/OT Security

Name That Toon: Tug of War

Picture of Mike Kosak

Mike Kosak

Senior Principal Intelligence Analyst, LastPass

Cyberattacks & Data Breaches

Cybersecurity & the 2024 US Elections

Picture of Boris Balacheff

Boris Balacheff

Chief Technologist for Security Research and Innovation, HP Inc. Security Lab

Vulnerabilities & Threats

Hardware Supply Chain Threats Can Undermine Endpoint Infrastructure

More Commentary

Startup Alley

Read More Startup Launches

Icons and fingerprints suggesting various authentication schemes on top of a laptop keyboard.

Identity & Access Management Security

Startup Finds 'Hydden' Identities in IT Environment

Sep 17, 2024

A sunset scene with clouds against a blue sky

Сloud Security

Startup Spotlight: RAD Security Brings Behavioral Profiling to Cloud

Aug 6, 2024

Hands on a laptop dealing with multiple applications and AI

Data Privacy

Startup Spotlight: Knostic Tackles AI's Oversharing Problem

Aug 5, 2024

Ready to Rumble: US Women's Cyber Team Preps for Global CTF Contest

The 12-member group will compete at the first all-women's capture-the-flag competition this November at the Kunoichi Cyber Games in Tokyo.

Coalition for Secure AI Promotes Safe, Ethical AI Development

The Coalition for Secure AI (CoSAI) has expanded its roster of members with the addition of threat intelligence management, collaboration, and response orchestration vendor Cyware.

CISA Urges Software Makers to Eliminate XSS Flaws

The latest Secure by Design alert from CISA outlines recommended actions security teams should implement to reduce the prevalence of cross-site scripting vulnerabilities in software.

Cybersecurity Features In-Depth: On security strategy, latest trends, and people to know. Brought to you by Mandiant.

Go to The Edge

Security Technology: Featuring news, news analysis, and commentary on the latest technology trends.

Go to DR Technology

Startup Finds 'Hydden' Identities in IT Environment

Hydden's platform detects and classifies an organization's identities, accounts, and privileges, regardless of where they reside in the IT environment.

Compliance Automation Pays Off for a Growing Company

In this case study, a CISO helps a B2B marketing automation company straighten out its manual compliance process by automating it.

SOAR Is Dead, Long Live SOAR

Business intelligence firm Gartner labels security orchestration, automation, and response as "obsolete," but the fight to automate and simplify security operations is here to stay.

Phishing Espionage Attack Targets US-Taiwan Defense Conference

Hackers sent a convincing lure document, but after 20 years of similar attacks, the target organization was well prepared.

Microsoft VS Code Undermined in Asian Spy Attack

A technique to abuse Microsoft's built-in source code editor has finally made it into the wild, thanks to China's Mustang Panda APT.

Singapore Arrests 6 Suspected Members of African Cybercrime Group

Law enforcement seized electronics containing special hacking tools and software as well as a substantial amount of cash in the raids.