CISO Corner

NFL Teams Block & Tackle Cyberattacks in a Digital World

Sep 13, 2024

SOAR Is Dead, Long Live SOAR

Sep 11, 2024

India Needs Better Cybersecurity for Space, Critical Infrastructure

Sep 11, 2024

Cyber Staffing Shortages Remain CISOs' Biggest Challenge

Sep 10, 2024

'CloudImposer' Flaw in Google Cloud Affected Millions of Servers

Attackers could have exploited a dependency confusion vulnerability affecting various Google Cloud services to execute a sprawling supply chain attack via just one malicious Python code package.

The flags of Israel and Russia

Threat Intelligence

Ukraine, Gaza Wars Inspire DDoS Surge Against Finservs

Sep 17, 2024

"Zero day exploit" and Alert icon on computer display

Application Security

'Void Banshee' Exploits Second Microsoft Zero-Day

Sep 16, 2024

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

Vulnerabilities & Threats

PODCAST

Dark Reading Confidential: Pen Test Arrests, Five Years Later

Episode 3: On September 11, 2019, two cybersecurity professionals were arrested in Dallas County, Iowa and forced to spend the night in jail -- just for doing their jobs. Gary De Mercurio and Justin Wynn. Despite the criminal charges against them eventually being dropped, the saga that night five years ago continues to haunt De Mercurio and Wynn personally and professionally. In this episode, the pair and Coalfire's CEO Tom McAndrew share how the arrest and fallout has shaped their lives and careers as well as how it has transformed physical penetration tests for the cybersecurity industry as a whole.

Latest News

Cyber Risk

Apple Abandons Spyware Suit to Avoid Sharing Cyber Secrets

byBecky Bracken, Senior Editor, Dark Reading

Threat Intelligence

Ukraine, Gaza Wars Inspire DDoS Surge Against Finservs

byNate Nelson, Contributing Writer

A white cloud against a black backdrop lit up inside by points of light connected by lines and the same points of light and lines below it

Сloud Security

'CloudImposer' Flaw in Google Cloud Affected Millions of Servers

byElizabeth Montalbano, Contributing Writer

"Zero day exploit" and Alert icon on computer display

Application Security

'Void Banshee' Exploits Second Microsoft Zero-Day

byJai Vijayan, Contributing Writer

Dictionary definition of the word sanctions

Cyber Risk

Cambodian Tycoon Sanctioned for Forced Cyber Labor, Trafficking

byNathan Eddy, Contributing Writer

A person typing on a laptop with a red, digital, holographic rectangle hovering over their hands reading "system hacked"

Threat Intelligence

Ivanti Cloud Bug Goes Under Exploit After Alarms Are Raised

byDark Reading Staff

Сloud Security

Fortinet Confirms Customer Data Breach via Third Party

byJai Vijayan, Contributing Writer

A man in a blue jacket voting in a voting booth

Threat Intelligence

Malicious Actors Sow Discord With False Election Compromise Claims

byDark Reading Staff

Cybersecurity Operations

NFL Teams Block & Tackle Cyberattacks in a Digital World

byRobert Lemos, Contributing Writer

Application Security

Microsoft VS Code Undermined in Asian Spy Attack

byNate Nelson, Contributing Writer

More News

Latest Commentary

Picture of Sébastien Cano

Sébastien Cano

Senior Vice President, Cloud Protection & Licensing Activities, Thales

Vulnerabilities & Threats

The Current Cybersecurity Landscape: New Threats, Same Security Mistakes

Picture of John Klossner, Cartoonist

John Klossner, Cartoonist

ICS/OT Security

Name That Toon: Tug of War

Picture of Mike Kosak

Mike Kosak

Senior Principal Intelligence Analyst, LastPass

Cyberattacks & Data Breaches

Cybersecurity & the 2024 US Elections

Picture of Boris Balacheff

Boris Balacheff

Chief Technologist for Security Research and Innovation, HP Inc. Security Lab

Vulnerabilities & Threats

Hardware Supply Chain Threats Can Undermine Endpoint Infrastructure

Picture of Ansh Patnaik

Ansh Patnaik

Senior Vice President of Product Management, CyCognito

Vulnerabilities & Threats

Rising Tide of Software Supply Chain Attacks: An Urgent Problem

Picture of Kelly Jackson Higgins, Editor-in-Chief, Dark Reading

Kelly Jackson Higgins, Editor-in-Chief, Dark Reading

Cybersecurity Operations

Dark Reading Expands Its Coverage to the Asia-Pacific Region

More Commentary

Startup Alley

Read More Startup Launches

A sunset scene with clouds against a blue sky

Сloud Security

Startup Spotlight: RAD Security Brings Behavioral Profiling to Cloud

Aug 6, 2024

Hands on a laptop dealing with multiple applications and AI

Data Privacy

Startup Spotlight: Knostic Tackles AI's Oversharing Problem

Aug 5, 2024

Three faucets with data in 0 and 1 flowing out of the tap.

Data Privacy

Startup Spotlight: LeakSignal Helps Plug Leaky Data in Organizations

Aug 5, 2024

When Startup Founders Should Start Thinking About Cybersecurity

Most investors aren't demanding cybersecurity preparedness from startups, but founders should still be worried about the risks.

UnDisruptable27 Project Wants to Shore Up Critical Infrastructure Security

The Institute for Security and Technology's UnDisruptable27 project connects technology firms with the public sector to strengthen US cyber defenses in case of attacks on critical infrastructure.

10 Writing Tips for Cybersecurity Professionals

It takes more than technical knowledge to write about cybersecurity in a way people want to read. It takes creativity, discipline, and other key skills.

Cybersecurity Features In-Depth: On security strategy, latest trends, and people to know. Brought to you by Mandiant.

Go to The Edge

Security Technology: Featuring news, news analysis, and commentary on the latest technology trends.

Go to DR Technology

Compliance Automation Pays Off for a Growing Company

In this case study, a CISO helps a B2B marketing automation company straighten out its manual compliance process by automating it.

SOAR Is Dead, Long Live SOAR

Business intelligence firm Gartner labels security orchestration, automation, and response as "obsolete," but the fight to automate and simplify security operations is here to stay.

Google Updates Cloud Backup, Disaster Recovery Service

The combination of immutability, indelibility, centralized governance, and user empowerment provides a comprehensive backup strategy, Google said.

Microsoft VS Code Undermined in Asian Spy Attack

A technique to abuse Microsoft's built-in source code editor has finally made it into the wild, thanks to China's Mustang Panda APT.

Singapore Arrests 6 Suspected Members of African Cybercrime Group

Law enforcement seized electronics containing special hacking tools and software as well as a substantial amount of cash in the raids.

Dark Reading Expands Its Coverage to the Asia-Pacific Region

The latest step in a journey to serve cybersecurity professionals in other regions of the world.