Black Hat News

A Wi-Fi hotspot in a airport
ICS/OT Security
IoT Cloud Cracked by 'Open Sesame' Over-the-Air AttackIoT Cloud Cracked by 'Open Sesame' Over-the-Air Attack
byBecky Bracken, Senior Editor, Dark Reading
Dec 12, 2024
3 Min Read
A glowing purple and pink key, with dots and numbers in the background
Cyber Risk
Symmetrical Cryptography Pioneer Targets the Post-Quantum EraSymmetrical Cryptography Pioneer Targets the Post-Quantum Era
byKristina Beek, Associate Editor, Dark Reading
Dec 11, 2024
3 Min Read
Cybersecurity Operations
CrowdStrike Tries to Patch Things Up With Cybersecurity Industry
CrowdStrike Tries to Patch Things Up With Cybersecurity Industry
Aug 12, 2024
|
3 Min Read
byFahmida Y. Rashid, Managing Editor, Features
Lorenzo Franceschi-Bicchierai, Robert McMillan, Sadia Mirza, and Sherri Davidoff on stage at Black Hat
Cyberattacks & Data Breaches
Media & Victims Find Common Ground Against Hackers
Media & Victims Find Common Ground Against Hackers
Aug 9, 2024
|
4 Min Read
byKristina Beek, Associate Editor, Dark Reading
The News Desk booth being built on the Black Hat floor.
Threat Intelligence
Dark Reading News Desk Live From Black Hat USA 2024
Dark Reading News Desk Live From Black Hat USA 2024
Aug 9, 2024
byDark Reading Staff, Dark Reading
A digital brain schematic
Application Security
How to Weaponize Microsoft Copilot for Cyberattackers
How to Weaponize Microsoft Copilot for Cyberattackers
Aug 8, 2024
|
6 Min Read
byJeffrey Schwartz, Contributing Writer
Ann Johnson, Corporate Vice President and Deputy CISO at Microsoft, and Sherrod DeGrippo, Dir. of Threat Intelligence Strategy at Microsoft, on stage
Cybersecurity Operations
Microsoft on CISOs: Thriving Community Means Stronger Security
Microsoft on CISOs: Thriving Community Means Stronger Security
Aug 8, 2024
|
4 Min Read
byKristina Beek, Associate Editor, Dark Reading
Hand pointing at icon labeled SaaS; various other icons surround it
Application Security
SaaS Apps Present an Abbreviated Kill Chain for Attackers
SaaS Apps Present an Abbreviated Kill Chain for Attackers
Aug 8, 2024
|
4 Min Read
byJai Vijayan, Contributing Writer
sun behind a cloud creating shadows
Remote Workforce
Critical AWS Vulnerabilities Allow S3 Attack Bonanza
Critical AWS Vulnerabilities Allow S3 Attack Bonanza
Aug 8, 2024
|
5 Min Read
byJeffrey Schwartz, Contributing Writer
A hand with a tiny Earth hanging from a string
Application Security
Hazy Issue in Entra ID Allows Privileged Users to Become Global Admins
Hazy Issue in Entra ID Allows Privileged Users to Become Global Admins
Aug 7, 2024
|
4 Min Read
byNate Nelson, Contributing Writer
Founder and CTO of Knostic, Sounil Yu, collecting his award onstage
Cybersecurity Operations
Knostic Wins 2024 Black Hat Startup Spotlight Competition
Knostic Wins 2024 Black Hat Startup Spotlight Competition
Aug 7, 2024
|
4 Min Read
byKristina Beek, Associate Editor, Dark Reading
Heads representing AI; blues and greens on a digital background with 1s and 0s
Application Security
Creating Insecure AI Assistants With Microsoft Copilot Studio Is Easy
Creating Insecure AI Assistants With Microsoft Copilot Studio Is Easy
Aug 7, 2024
|
4 Min Read
byJeffrey Schwartz, Contributing Writer
A sunset scene with clouds against a blue sky
Сloud Security
Startup Spotlight: RAD Security Brings Behavioral Profiling to Cloud
Startup Spotlight: RAD Security Brings Behavioral Profiling to Cloud
Aug 6, 2024
|
3 Min Read
byDark Reading Staff, Dark Reading
Hands on a laptop dealing with multiple applications and AI
Data Privacy
Startup Spotlight: Knostic Tackles AI's Oversharing Problem
Startup Spotlight: Knostic Tackles AI's Oversharing Problem
Aug 5, 2024
|
3 Min Read
byDark Reading Staff, Dark Reading
Three faucets with data in 0 and 1 flowing out of the tap.
Data Privacy
Startup Spotlight: LeakSignal Helps Plug Leaky Data in Organizations
Startup Spotlight: LeakSignal Helps Plug Leaky Data in Organizations
Aug 5, 2024
|
3 Min Read
byDark Reading Staff, Dark Reading
A magnified section of computer code on a screen
Vulnerabilities & Threats
Attacks on Bytecode Interpreters Conceal Malicious Injection Activity
Attacks on Bytecode Interpreters Conceal Malicious Injection Activity
Aug 1, 2024
|
4 Min Read
byRobert Lemos, Contributing Writer
People on stage at a conference; mics visible
Vulnerabilities & Threats
7 Sessions Not to Miss at Black Hat USA 2024
7 Sessions Not to Miss at Black Hat USA 2024
Jul 29, 2024
|
3 Min Read
byMeny Har, CEO & Co-Founder, Opus Security
A hand holding a virtual AI display
Cyber Risk
Nvidia Embraces LLMs & Commonsense Cybersecurity Strategy
Nvidia Embraces LLMs & Commonsense Cybersecurity Strategy
Jul 26, 2024
|
4 Min Read
byRobert Lemos, Contributing Writer
Network web overlaid over a circuit board along with a padlock
Vulnerabilities & Threats
Could Intel Have Fixed Spectre & Meltdown Bugs Earlier?
Could Intel Have Fixed Spectre & Meltdown Bugs Earlier?
Jul 26, 2024
|
3 Min Read
byAgam Shah, Contributing Writer
A laptop showing the Microsoft WIndows 11 logo
Endpoint Security
Goodbye? Attackers Can Bypass 'Windows Hello' Strong Authentication
Goodbye? Attackers Can Bypass 'Windows Hello' Strong Authentication
Jul 23, 2024
|
4 Min Read
byJeffrey Schwartz, Contributing Writer
Mobile device in a hand with the Tinder app open to a profile
Application Security
Swipe Right for Data Leaks: Dating Apps Expose Location, More
Swipe Right for Data Leaks: Dating Apps Expose Location, More
Jul 22, 2024
|
6 Min Read
byElizabeth Montalbano, Contributing Writer
Quantum entanglement; conceptual artwork of a pair of entangled quantum particles or events
Cyber Risk
Quantum Leap: Advanced Computing Is a Vulnerable Cyber Target
Quantum Leap: Advanced Computing Is a Vulnerable Cyber Target
Jul 22, 2024
|
4 Min Read
byJeffrey Schwartz, Contributing Writer
Red button on a computer keyboard that says "email security" in white
Threat Intelligence
20 Million Trusted Domains Vulnerable to Email Hosting Exploits
20 Million Trusted Domains Vulnerable to Email Hosting Exploits
Jul 18, 2024
|
4 Min Read
byElizabeth Montalbano, Contributing Writer
Cybersecurity Careers
Training at Black Hat to Focus on Equipping Cybersecurity Leaders With Soft Skills
Training at Black Hat to Focus on Equipping Cybersecurity Leaders With Soft Skills
Jul 17, 2024
|
3 Min Read
byJoan Goodchild, Contributing Writer
An outdoor sign showing Wi-Fi availability.
Endpoint Security
Apple Geolocation API Exposes Wi-Fi Access Points Worldwide
Apple Geolocation API Exposes Wi-Fi Access Points Worldwide
Jul 8, 2024
|
5 Min Read
byNate Nelson, Contributing Writer
Perfect harmony of shiny chrome balls.Teamwork,Risk and Balance concept
Cyber Risk
Ensuring AI Safety While Balancing Innovation
Ensuring AI Safety While Balancing Innovation
Jul 5, 2024
|
3 Min Read
byJoan Goodchild, Contributing Writer
Uncle Sam's hand holding a Get Out of Jail card.
Cybersecurity Operations
A CISO's Guide to Avoiding Jail After a Breach
A CISO's Guide to Avoiding Jail After a Breach
Jul 5, 2024
|
5 Min Read
byNate Nelson, Contributing Writer
5G cellphone tower against a cloudy sky
Mobile Security
Your Phone's 5G Connection Is Vulnerable to Bypass, DoS Attacks
Your Phone's 5G Connection Is Vulnerable to Bypass, DoS Attacks
Jun 27, 2024
|
4 Min Read
byNate Nelson, Contributing Writer
Cyber Risk
Is Defense Winning? A Look at Decades of Playing Catch-up
Is Defense Winning? A Look at Decades of Playing Catch-up
Jun 26, 2024
|
3 Min Read
byJoan Goodchild, Contributing Writer
Dart on target, holding up a piece of paper reading "METRICS"
Cybersecurity Analytics
Rethinking How You Work With Detection and Response Metrics
Rethinking How You Work With Detection and Response Metrics
Apr 19, 2024
|
3 Min Read
byJeffrey Schwartz, Contributing Writer
Colorful abstract illustrated design of dots
Vulnerabilities & Threats
'MagicDot' Windows Weakness Allows Unprivileged Rootkit Activity
'MagicDot' Windows Weakness Allows Unprivileged Rootkit Activity
Apr 19, 2024
|
7 Min Read
byTara Seals, Managing Editor, News, Dark Reading
The letters EDR/XDR amid binary code
Application Security
Evil XDR: Researcher Turns Palo Alto Software Into Perfect Malware
Evil XDR: Researcher Turns Palo Alto Software Into Perfect Malware
Apr 19, 2024
|
4 Min Read
byNate Nelson, Contributing Writer
Cones and spools of colorful sewing thread organized by color from red, orange, yellow, blue
Application Security
Sneaky Shellcode: Windows Fibers Offer EDR-Proof Code Execution
Sneaky Shellcode: Windows Fibers Offer EDR-Proof Code Execution
Apr 18, 2024
|
5 Min Read
byTara Seals, Managing Editor, News, Dark Reading
man pointing to cloud
Сloud Security
Open Source Tool Looks for Signals in Noisy AWS Cloud Logs
Open Source Tool Looks for Signals in Noisy AWS Cloud Logs
Apr 18, 2024
|
4 Min Read
byRobert Lemos, Contributing Writer
A hand holding a tablet device with a hologram of a digital brain floating above it
Сloud Security
ML Model Repositories: The Next Big Supply Chain Attack Target
ML Model Repositories: The Next Big Supply Chain Attack Target
Mar 18, 2024
|
4 Min Read
byJai Vijayan, Contributing Writer

Editor's Choice

A woman sitting at a laptop and holding a mobile device, the screens of both displaying a green check mark in a circle
Cyberattacks & Data Breaches
Researchers Crack Microsoft Azure MFA in an HourResearchers Crack Microsoft Azure MFA in an Hour
byElizabeth Montalbano, Contributing Writer
Dec 11, 2024
4 Min Read
The words "zero-day" written in a line of code on a computer screen
Application Security
Microsoft NTLM Zero-Day to Remain Unpatched Until AprilMicrosoft NTLM Zero-Day to Remain Unpatched Until April
byJai Vijayan, Contributing Writer
Dec 9, 2024
3 Min Read
A patchwork quilt
Application Security
Actively Exploited Zero-Day, Critical RCEs Lead Microsoft Patch TuesdayMicrosoft Fixes Active Zero-Day, Critical RCEs on Patch Tuesday
byTara Seals, Managing Editor, News, Dark Reading
Dec 10, 2024
5 Min Read
Reports
More Reports
Webinars
More Webinars
White Papers
More Whitepapers
Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
Subscribe