CISO Corner

CISO Paychecks: Worth the Growing Security Headaches?

Oct 7, 2024

Navigating the Complexities & Security Risks of Multicloud Management

Oct 3, 2024

Infrastructure vs. Runtime — Where Are Your Priorities?

Oct 1, 2024

Overtaxed State CISOs Struggle With Budgeting, Staffing

Sep 30, 2024

Salt Typhoon APT Subverts Law Enforcement Wiretapping: Report

The Chinese state-sponsored cyberattack threat managed to infiltrate the "lawful intercept" network connections that police use in criminal investigations.

Silhouette of a hand holding a magnifying glass in front of the Google Chrome logo

Cyber Risk

Malicious Chrome Extensions Skate Past Google's Updated Security

Oct 7, 2024

WordPress logo on a device screen beside a computer screen showing the WordPress homepage

Endpoint Security

Single HTTP Request Can Exploit 6M WordPress Sites

Oct 7, 2024

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

Vulnerabilities & Threats

PODCAST

Dark Reading Confidential: Pen-Test Arrests, 5 Years Later

Episode 3: On Sept. 11, 2019, two cybersecurity professionals, Gary De Mercurio and Justin Wynn, were arrested in Dallas County, Iowa, and forced to spend the night in jail — just for doing their jobs. Despite the criminal charges against them eventually being dropped, the saga that night five years ago continues to haunt De Mercurio and Wynn personally and professionally. In this episode, the pair and Coalfire CEO Tom McAndrew share how the arrest and fallout has shaped their lives and careers as well as how it has transformed physical penetration tests for the cybersecurity industry as a whole.

Latest News

Apes riding horses in a still from 1968's "Planet of the Apes"

Cyberattacks & Data Breaches

GorillaBot Goes Ape With 300K Cyberattacks Worldwide

byJai Vijayan, Contributing Writer

Glass salt shaker tipped over and spilling

Cyber Risk

Salt Typhoon APT Subverts Law Enforcement Wiretapping: Report

byTara Seals, Managing Editor, News, Dark Reading

Cyber Risk

CISO Paychecks: Worth the Growing Security Headaches?

byRobert Lemos, Contributing Writer

Cyber Risk

Malicious Chrome Extensions Skate Past Google's Updated Security

byJai Vijayan, Contributing Writer

Endpoint Security

Single HTTP Request Can Exploit 6M WordPress Sites

byElizabeth Montalbano, Contributing Writer

Two people watching as one person passes files to another person.

Threat Intelligence

MITRE Launches AI Incident Sharing Initiative

byJennifer Lawinski, Contributing Writer

Cyber Risk

iPhone 'VoiceOver' Feature Could Read Passwords Aloud

byNate Nelson, Contributing Writer

A man in a suit clicking on a red button in a row of blue ones

Threat Intelligence

Insider Threat Damage Balloons as Visibility Gaps Widen

byKristina Beek, Associate Editor, Dark Reading

Threat Intelligence

Microsoft, DOJ Dismantle Russian Hacker Group Star Blizzard

byNathan Eddy, Contributing Writer

Cyberattacks & Data Breaches

DPRK's APT37 Targets Cambodia With Khmer, 'VeilShell' Backdoor

byNate Nelson, Contributing Writer

More News

Latest Commentary

Picture of Jason Healey

Jason Healey

Senior Research Scholar, Columbia University School of International and Public Affairs

Vulnerabilities & Threats

What the White House Should Do Next for Cyber Regulation

Picture of Akhil Mittal

Akhil Mittal

Senior Manager, Synopsys Software Integrity Group

Cybersecurity Operations

Cybersecurity Is Serious — but It Doesn't Have to Be Boring

Picture of Debrup Ghosh

Debrup Ghosh

Principal Product Manager, F5 Inc.

Vulnerabilities & Threats

The Future of AI Safety: California's Vetoed Bill & What Comes Next

Picture of Jatin Mannepalli

Jatin Mannepalli

Information Security Officer, IMC Trading

Vulnerabilities & Threats

Navigating the Complexities & Security Risks of Multicloud Management

Picture of Paul Bingham

Paul Bingham

Senior Vice President & Executive Dean, Western Governors University

Vulnerabilities & Threats

Top 5 Myths of AI & Cybersecurity

Picture of Han Cho

Han Cho

Founder, HC Consulting

Vulnerabilities & Threats

Infrastructure vs. Runtime — Where Are Your Priorities?

More Commentary

Startup Alley

Read More Startup Launches

PR Logo

Сloud Security

Apono Raises $15.5M Series A Funding for AI-driven, Least Privilege Solution Set

Oct 1, 2024

Icons and fingerprints suggesting various authentication schemes on top of a laptop keyboard.

Identity & Access Management Security

Startup Finds 'Hydden' Identities in IT Environment

Sep 17, 2024

A sunset scene with clouds against a blue sky

Сloud Security

Startup Spotlight: RAD Security Brings Behavioral Profiling to Cloud

Aug 6, 2024

Name That Edge Toon: And For My Next Trick ...

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Criminals Are Testing Their Ransomware Campaigns in Africa

The booming economies of Africa, rich in natural resources and brimming with potential, are attracting not just investors but also cybercriminals.

NSA Releases 6 Principles of OT Cybersecurity

Organizations can use this guide to make decisions about designing, implementing, and managing OT environments to ensure they are both safe and secure, as well as to enable business continuity for critical services.

Cybersecurity Features In-Depth: On security strategy, latest trends, and people to know. Brought to you by Mandiant.

Go to The Edge

Security Technology: Featuring news, news analysis, and commentary on the latest technology trends.

Go to DR Technology

MITRE Launches AI Incident Sharing Initiative

The collaboration with industry partners aims to improve collective AI defenses. Trusted contributors receive protected and anonymized data on real-world AI incidents.

What Communications Companies Need to Know Before Q-Day

NIST standardized three algorithms for post-quantum cryptography. What does that mean for the information and communications technology (ICT) industry?

4 Ways to Fight AI-Based Fraud

Generative AI is being used to make cyberscams more believable. Here's how organizations can counter that using newly emerging tools and reliable methods.

DPRK's APT37 Targets Cambodia With Khmer, 'VeilShell' Backdoor

It's North Korea versus Cambodia, with Windows default settings and sheer patience allowing the bad guys to avoid easy detection.

China-Backed APT Group Culling Thai Government Data

CeranaKeeper is bombarding Southeast Asia with data exfiltration attacks via file-sharing services such as Pastebin, OneDrive, and GitHub, researchers say.

UAE, Saudi Arabia Become Plum Cyberattack Targets

Hacktivism-related DDoS attacks have risen 70% in the region, most often targeting the public sector, while stolen data and access offers dominate the Dark Web.