CISO Corner

Navigating the Complexities & Security Risks of Multicloud Management

Oct 3, 2024

Infrastructure vs. Runtime — Where Are Your Priorities?

Oct 1, 2024

Overtaxed State CISOs Struggle With Budgeting, Staffing

Sep 30, 2024

Reachability Analysis Pares Down Static Security-Testing Overload

Sep 30, 2024

Microsoft, DOJ Dismantle Russian Hacker Group Star Blizzard

The successful disruption of notorious Russian hacker group Star Blizzard's operations arrives one month out from the US presidential election — one of the APT's prime targets.

A man in a suit clicking on a red button in a row of blue ones

Threat Intelligence

Insider Threat Damage Balloons as Visibility Gaps Widen

Oct 4, 2024

Several iPhones on a table.

Cyber Risk

iPhone 'VoiceOver' Feature Could Read Passwords Aloud

Oct 4, 2024

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

Vulnerabilities & Threats

PODCAST

Dark Reading Confidential: Pen-Test Arrests, 5 Years Later

Episode 3: On Sept. 11, 2019, two cybersecurity professionals, Gary De Mercurio and Justin Wynn, were arrested in Dallas County, Iowa, and forced to spend the night in jail — just for doing their jobs. Despite the criminal charges against them eventually being dropped, the saga that night five years ago continues to haunt De Mercurio and Wynn personally and professionally. In this episode, the pair and Coalfire CEO Tom McAndrew share how the arrest and fallout has shaped their lives and careers as well as how it has transformed physical penetration tests for the cybersecurity industry as a whole.

Latest News

Two people watching as one person passes files to another person.

Threat Intelligence

MITRE Launches AI Incident Sharing Initiative

byJennifer Lawinski, Contributing Writer

Cyber Risk

iPhone 'VoiceOver' Feature Could Read Passwords Aloud

byNate Nelson, Contributing Writer

A man in a suit clicking on a red button in a row of blue ones

Threat Intelligence

Insider Threat Damage Balloons as Visibility Gaps Widen

byKristina Beek, Associate Editor, Dark Reading

Threat Intelligence

Microsoft, DOJ Dismantle Russian Hacker Group Star Blizzard

byNathan Eddy, Contributing Writer

Cyberattacks & Data Breaches

DPRK's APT37 Targets Cambodia With Khmer, 'VeilShell' Backdoor

byNate Nelson, Contributing Writer

Fiber optics background with lots of light spots

Endpoint Security

Thousands of DrayTek Routers at Risk From 14 Vulnerabilities

byJai Vijayan, Contributing Writer

Threat Intelligence

CISA Adds High-Severity Ivanti Vulnerability to KEV Catalog

byDark Reading Staff

Ukraine and Russia flags on a cracked wall

Cyberattacks & Data Breaches

Ukraine-Russia Cyber Battles Tip Over Into the Real World

byNathan Eddy, Contributing Writer

A cutout of a person's face on the left side and a photo with the face cut out on the right side with digital rendering where face would be

Endpoint Security

AI 'Nude Photo Generator' Delivers Infostealers Instead of Images

byElizabeth Montalbano, Contributing Writer

Chinese flag draped over surveillance camera

Cyberattacks & Data Breaches

China-Backed APT Group Culling Thai Government Data

byDark Reading Staff

More News

Latest Commentary

Picture of Jason Healey

Jason Healey

Senior Research Scholar, Columbia University School of International and Public Affairs

Vulnerabilities & Threats

What the White House Should Do Next for Cyber Regulation

Picture of Akhil Mittal

Akhil Mittal

Senior Manager, Synopsys Software Integrity Group

Cybersecurity Operations

Cybersecurity Is Serious — but It Doesn't Have to Be Boring

Picture of Debrup Ghosh

Debrup Ghosh

Principal Product Manager, F5 Inc.

Vulnerabilities & Threats

The Future of AI Safety: California's Vetoed Bill & What Comes Next

Picture of Jatin Mannepalli

Jatin Mannepalli

Information Security Officer, IMC Trading

Vulnerabilities & Threats

Navigating the Complexities & Security Risks of Multicloud Management

Picture of Paul Bingham

Paul Bingham

Senior Vice President & Executive Dean, Western Governors University

Vulnerabilities & Threats

Top 5 Myths of AI & Cybersecurity

Picture of Han Cho

Han Cho

Founder, HC Consulting

Vulnerabilities & Threats

Infrastructure vs. Runtime — Where Are Your Priorities?

More Commentary

Startup Alley

Read More Startup Launches

PR Logo

Сloud Security

Apono Raises $15.5M Series A Funding for AI-driven, Least Privilege Solution Set

Oct 1, 2024

Icons and fingerprints suggesting various authentication schemes on top of a laptop keyboard.

Identity & Access Management Security

Startup Finds 'Hydden' Identities in IT Environment

Sep 17, 2024

A sunset scene with clouds against a blue sky

Сloud Security

Startup Spotlight: RAD Security Brings Behavioral Profiling to Cloud

Aug 6, 2024

Name That Edge Toon: And For My Next Trick ...

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Criminals Are Testing Their Ransomware Campaigns in Africa

The booming economies of Africa, rich in natural resources and brimming with potential, are attracting not just investors but also cybercriminals.

NSA Releases 6 Principles of OT Cybersecurity

Organizations can use this guide to make decisions about designing, implementing, and managing OT environments to ensure they are both safe and secure, as well as to enable business continuity for critical services.

Cybersecurity Features In-Depth: On security strategy, latest trends, and people to know. Brought to you by Mandiant.

Go to The Edge

Security Technology: Featuring news, news analysis, and commentary on the latest technology trends.

Go to DR Technology

MITRE Launches AI Incident Sharing Initiative

The collaboration with industry partners aims to improve collective AI defenses. Trusted contributors receive protected and anonymized data on real-world AI incidents.

What Communications Companies Need to Know Before Q-Day

NIST standardized three algorithms for post-quantum cryptography. What does that mean for the information and communications technology (ICT) industry?

4 Ways to Fight AI-Based Fraud

Generative AI is being used to make cyberscams more believable. Here's how organizations can counter that using newly emerging tools and reliable methods.

DPRK's APT37 Targets Cambodia With Khmer, 'VeilShell' Backdoor

It's North Korea versus Cambodia, with Windows default settings and sheer patience allowing the bad guys to avoid easy detection.

China-Backed APT Group Culling Thai Government Data

CeranaKeeper is bombarding Southeast Asia with data exfiltration attacks via file-sharing services such as Pastebin, OneDrive, and GitHub, researchers say.

UAE, Saudi Arabia Become Plum Cyberattack Targets

Hacktivism-related DDoS attacks have risen 70% in the region, most often targeting the public sector, while stolen data and access offers dominate the Dark Web.