CISO Corner

Infrastructure vs. Runtime — Where Are Your Priorities?

Oct 1, 2024

Overtaxed State CISOs Struggle With Budgeting, Staffing

Sep 30, 2024

Reachability Analysis Pares Down Static Security-Testing Overload

Sep 30, 2024

Shadow AI, Data Exposure Plague Workplace Chatbot Use

Sep 30, 2024

More Articles for CISOs

Threat Intelligence

Near-'perfctl' Fileless Malware Targets Millions of Linux Servers

Near-'perfctl' Fileless Malware Targets Millions of Linux Servers

Armed with a staggering arsenal of at least 20,000 different exploits for various Linux server misconfigurations, perfctl is everywhere, annoying, and tough to get rid of.

A cutout of a person's face on the left side and a photo with the face cut out on the right side with digital rendering where face would be

Endpoint Security

AI 'Nude Photo Generator' Delivers Infostealers Instead of Images

AI 'Nude Photo Generator' Delivers Infostealers Instead of Images

Oct 3, 2024

Chinese flag draped over surveillance camera

Cyberattacks & Data Breaches

China-Backed APT Group Culling Thai Government Data

China-Backed APT Group Culling Thai Government Data

Oct 3, 2024

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

Vulnerabilities & Threats

PODCAST

Dark Reading Confidential: Pen-Test Arrests, 5 Years Later

Episode 3: On Sept. 11, 2019, two cybersecurity professionals, Gary De Mercurio and Justin Wynn, were arrested in Dallas County, Iowa, and forced to spend the night in jail — just for doing their jobs. Despite the criminal charges against them eventually being dropped, the saga that night five years ago continues to haunt De Mercurio and Wynn personally and professionally. In this episode, the pair and Coalfire CEO Tom McAndrew share how the arrest and fallout has shaped their lives and careers as well as how it has transformed physical penetration tests for the cybersecurity industry as a whole.

Latest News

Fiber optics background with lots of light spots

Endpoint Security

Thousands of DrayTek Routers at Risk From 14 Vulnerabilities

Thousands of DrayTek Routers at Risk From 14 Vulnerabilities

byJai Vijayan, Contributing Writer

Threat Intelligence

CISA Adds High-Severity Ivanti Vulnerability to KEV Catalog

CISA Adds High-Severity Ivanti Vulnerability to KEV Catalog

byDark Reading Staff

Ukraine and Russia flags on a cracked wall

Cyberattacks & Data Breaches

Ukraine-Russia Cyber Battles Tip Over Into the Real World

Ukraine-Russia Cyber Battles Tip Over Into the Real World

byNathan Eddy, Contributing Writer

A cutout of a person's face on the left side and a photo with the face cut out on the right side with digital rendering where face would be

Endpoint Security

AI 'Nude Photo Generator' Delivers Infostealers Instead of Images

AI 'Nude Photo Generator' Delivers Infostealers Instead of Images

byElizabeth Montalbano, Contributing Writer

Chinese flag draped over surveillance camera

Cyberattacks & Data Breaches

China-Backed APT Group Culling Thai Government Data

China-Backed APT Group Culling Thai Government Data

byDark Reading Staff

A Linux sign

Threat Intelligence

Near-'perfctl' Fileless Malware Targets Millions of Linux Servers

Near-'perfctl' Fileless Malware Targets Millions of Linux Servers

byNate Nelson, Contributing Writer

Long-legged fly (Poecilobothrus sp) male on leaf with reflection in water

Vulnerabilities & Threats

North Korea's 'Stonefly' APT Swarms US Private Co's. for Profit

North Korea's 'Stonefly' APT Swarms US Private Co's. for Profit

byTara Seals, Managing Editor, News, Dark Reading

ICS/OT Security

NSA Releases 6 Principles of OT Cybersecurity

NSA Releases 6 Principles of OT Cybersecurity

byJennifer Lawinski, Contributing Writer

Spilled coffee with milk in a white cup and white background

Vulnerabilities & Threats

Unix Printing Vulnerabilities Enable Easy DDoS Attacks

Unix Printing Vulnerabilities Enable Easy DDoS Attacks

byJai Vijayan, Contributing Writer

Gray, black, and green snake with its head resting on its coiled up body

Endpoint Security

Python-Based Malware Slithers Into Systems via Legit VS Code

Python-Based Malware Slithers Into Systems via Legit VS Code

byElizabeth Montalbano, Contributing Writer

Latest Commentary

Picture of Debrup Ghosh

Principal Product Manager, F5 Inc.

Vulnerabilities & Threats

The Future of AI Safety: California's Vetoed Bill & What Comes Next

Picture of Jatin Mannepalli

Jatin Mannepalli

Information Security Officer, IMC Trading

Vulnerabilities & Threats

Navigating the Complexities & Security Risks of Multicloud Management

Picture of Paul Bingham

Senior Vice President & Executive Dean, Western Governors University

Vulnerabilities & Threats

Top 5 Myths of AI & Cybersecurity

Picture of Han Cho

Founder, HC Consulting

Vulnerabilities & Threats

Infrastructure vs. Runtime — Where Are Your Priorities?

Picture of Apu Pavithran

Founder & CEO, Hexnode

Cybersecurity Operations

Treat Your Enterprise Data Like a Digital Nomad

Picture of Chris Crummey

Director, Executive & Board Cyber Services, Sygnia

Cyberattacks & Data Breaches

Top Allies for Executives & Boards to Leverage During a Cyber Crisis

More Commentary

Startup Alley

Read More Startup Launches

Сloud Security

Apono Raises $15.5M Series A Funding for AI-driven, Least Privilege Solution Set

Apono Raises $15.5M Series A Funding for AI-driven, Least Privilege Solution Set

Oct 1, 2024

Icons and fingerprints suggesting various authentication schemes on top of a laptop keyboard.

Identity & Access Management Security

Startup Finds 'Hydden' Identities in IT Environment

Startup Finds 'Hydden' Identities in IT Environment

Sep 17, 2024

A sunset scene with clouds against a blue sky

Сloud Security

Startup Spotlight: RAD Security Brings Behavioral Profiling to Cloud

Startup Spotlight: RAD Security Brings Behavioral Profiling to Cloud

Aug 6, 2024

NSA Releases 6 Principles of OT Cybersecurity

Organizations can use this guide to make decisions about designing, implementing, and managing OT environments to ensure they are both safe and secure, as well as to enable business continuity for critical services.

Normalizing Security Culture: You Don't Have to Get Ready If You Stay Ready

Prioritizing security as a critical element to an organization's effectiveness and success will reduce the risk of incidents, while benefiting the whole team and the organization's reputation.

FERC Outlines Supply Chain Security Rules for Power Plants

The US Federal Energy Regulatory Commission spells out what electric utilities should do to protect their software supply chains, as well as their network "trust zones."

Cybersecurity Features In-Depth: On security strategy, latest trends, and people to know. Brought to you by Mandiant.

Security Technology: Featuring news, news analysis, and commentary on the latest technology trends.

Go to DR Technology

What Communications Companies Need to Know Before Q-Day

NIST standardized three algorithms for post-quantum cryptography. What does that mean for the information and communications technology (ICT) industry?

4 Ways to Fight AI-Based Fraud

Generative AI is being used to make cyberscams more believable. Here's how organizations can counter that using newly emerging tools and reliable methods.

Dragos Expands ICS Platform With New Acquisition

The addition of Network Perception will bring enhanced network visibility, compliance, and segmentation analytics to the Dragos OT cybersecurity platform.

China-Backed APT Group Culling Thai Government Data

CeranaKeeper is bombarding Southeast Asia with data exfiltration attacks via file-sharing services such as Pastebin, OneDrive, and GitHub, researchers say.

UAE, Saudi Arabia Become Plum Cyberattack Targets

Hacktivism-related DDoS attacks have risen 70% in the region, most often targeting the public sector, while stolen data and access offers dominate the Dark Web.

'SloppyLemming' APT Abuses Cloudflare Service in Pakistan Attacks

Who needs advanced malware when you can take advantage of a bunch of OSS tools and free cloud services to compromise your target?

Breaking cybersecurity news, news analysis, commentary, and other content from around the world.

Go to DR Global

Press Releases

Cybersecurity Operations

Kevin Mandia Joins Expel's Board of Directors Kevin Mandia Joins Expel's Board of Directors

Cybersecurity Operations

Bishop Fox Announces Cosmos Integration With ServiceNow Bishop Fox Announces Cosmos Integration With ServiceNow

Cyberattacks & Data Breaches

Retail & Hospitality ISAC Announces Pam Lindemoen As New CSO and VP Retail & Hospitality ISAC Announces Pam Lindemoen As New CSO and VP

Threat Intelligence

Darktrace Announces Formal Completion of its Acquisition by Thoma Bravo Darktrace Announces Formal Completion of its Acquisition by Thoma Bravo