CISO Corner

SOAR Is Dead, Long Live SOAR

Sep 11, 2024

India Needs Better Cybersecurity for Space, Critical Infrastructure

Sep 11, 2024

Cyber Staffing Shortages Remain CISOs' Biggest Challenge

Sep 10, 2024

Dark Reading Confidential: Pen Test Arrests, Five Years Later

Sep 10, 2024

Socially Savvy Scattered Spider Traps Cloud Admins in Web

The dangerous ransomware group is targeting financial and insurance sectors using smishing and vishing against IT service desk administrators, cybersecurity teams, and other employees with top-level privileges.

Police patrol cars parked in front of a police station in Little India district in Singapore

Threat Intelligence

Singapore Arrests 6 Suspected Members of African Cybercrime Group

Sep 12, 2024

A Selenium pill capsule

Application Security

Hackers Proxyjack & Cryptomine Selenium Grid Servers

Sep 12, 2024

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

Vulnerabilities & Threats

PODCAST

Dark Reading Confidential: Pen Test Arrests, Five Years Later

Episode 3: On September 11, 2019, two cybersecurity professionals were arrested in Dallas County, Iowa and forced to spend the night in jail -- just for doing their jobs. Gary De Mercurio and Justin Wynn. Despite the criminal charges against them eventually being dropped, the saga that night five years ago continues to haunt De Mercurio and Wynn personally and professionally. In this episode, the pair and Coalfire's CEO Tom McAndrew share how the arrest and fallout has shaped their lives and careers as well as how it has transformed physical penetration tests for the cybersecurity industry as a whole.

Latest News

Application Security

Microsoft VS Code Undermined in Asian Spy Attack

byNate Nelson, Contributing Writer

An unseen man in a suit holding up his hand holding a glowing orb that says ".com" Surrounding it are other orbs holding domain names

Cyber Risk

For Just $20, Researchers Seize Part of Internet Infrastructure

byJai Vijayan, Contributing Writer

System hacked warning alert on laptop screen

Cyberattacks & Data Breaches

'Hadooken' Malware Targets Oracle's WebLogic Servers

byJai Vijayan, Contributing Writer

Yellow spider with black stripes and black and yellow legs perched on a web

Сloud Security

Socially Savvy Scattered Spider Traps Cloud Admins in Web

byElizabeth Montalbano, Contributing Writer

Police patrol cars parked in front of a police station in Little India district in Singapore

Threat Intelligence

Singapore Arrests 6 Suspected Members of African Cybercrime Group

byDark Reading Staff

Application Security

Hackers Proxyjack & Cryptomine Selenium Grid Servers

byNate Nelson, Contributing Writer

Two rhinoceros beetles on a piece of wood/branch. The background is blurred greenery

Cyberattacks & Data Breaches

Amateurish 'CosmicBeetle' Ransomware Stings SMBs in Turkey

byRobert Lemos, Contributing Writer

Screenshot of Gartner chart regarding security operations and SOAR

Cybersecurity Operations

SOAR Is Dead, Long Live SOAR

byRobert Lemos, Contributing Writer

ICS/OT Security

Remote Access Sprawl Strains Industrial OT Network Security

byBecky Bracken, Senior Editor, Dark Reading

ICS/OT Security

Air-Gapped Networks Vulnerable to Acoustic Attack via LCD Screens

byNate Nelson, Contributing Writer

More News

Latest Commentary

Picture of Ansh Patnaik

Ansh Patnaik

Senior Vice President of Product Management, CyCognito

Vulnerabilities & Threats

Rising Tide of Software Supply Chain Attacks: An Urgent Problem

Picture of Kelly Jackson Higgins, Editor-in-Chief, Dark Reading

Kelly Jackson Higgins, Editor-in-Chief, Dark Reading

Cybersecurity Operations

Dark Reading Expands Its Coverage to the Asia-Pacific Region

Picture of Gareth Owenson

Gareth Owenson

CTO & Co-founder, Searchlight Cyber

Cybersecurity Operations

How Law Enforcement's Ransomware Strategies Are Evolving

Picture of Michelle Ensey

Michelle Ensey

Senior Manager of Product Management, NGINX

Application Security

Platform Engineering Is Security Engineering

Picture of Eric Grenier

Eric Grenier

Director Analyst, Gartner

Endpoint Security

How to Establish & Enhance Endpoint Security

Picture of Travis Galloway

Travis Galloway

Head of Government Affairs, SolarWinds

Vulnerabilities & Threats

Using Transparency & Sharing to Defend Critical Infrastructure

More Commentary

Startup Alley

Read More Startup Launches

A sunset scene with clouds against a blue sky

Сloud Security

Startup Spotlight: RAD Security Brings Behavioral Profiling to Cloud

Aug 6, 2024

Hands on a laptop dealing with multiple applications and AI

Data Privacy

Startup Spotlight: Knostic Tackles AI's Oversharing Problem

Aug 5, 2024

Three faucets with data in 0 and 1 flowing out of the tap.

Data Privacy

Startup Spotlight: LeakSignal Helps Plug Leaky Data in Organizations

Aug 5, 2024

10 Writing Tips for Cybersecurity Professionals

It takes more than technical knowledge to write about cybersecurity in a way people want to read. It takes creativity, discipline, and other key skills.

What Is the Shared Fate Model?

New threats, an overburdened workforce, and regulatory pressures mean cloud service providers need a more resilient model than the shared responsibility framework. That's where "shared fate" comes in.

White House Unveils Road Map to Fix BGP

The White House Office of the National Cyber Director released a plan outlining steps network operators and service providers need to take to secure BGP from abuse and configuration errors.

Cybersecurity Features In-Depth: On security strategy, latest trends, and people to know. Brought to you by Mandiant.

Go to The Edge

Security Technology: Featuring news, news analysis, and commentary on the latest technology trends.

Go to DR Technology

SOAR Is Dead, Long Live SOAR

Business intelligence firm Gartner labels security orchestration, automation, and response as "obsolete," but the fight to automate and simplify security operations is here to stay.

Google Updates Cloud Backup, Disaster Recovery Service

The combination of immutability, indelibility, centralized governance, and user empowerment provides a comprehensive backup strategy, Google said.

How a Centuries-Old Company Reached Security Maturity

In this case study, a 180-year-old life and pension insurer brought its security infrastructure into the modern age.

Microsoft VS Code Undermined in Asian Spy Attack

A technique to abuse Microsoft's built-in source code editor has finally made it into the wild, thanks to China's Mustang Panda APT.

Singapore Arrests 6 Suspected Members of African Cybercrime Group

Law enforcement seized electronics containing special hacking tools and software as well as a substantial amount of cash in the raids.

Dark Reading Expands Its Coverage to the Asia-Pacific Region

The latest step in a journey to serve cybersecurity professionals in other regions of the world.