News

Several iPhones on a table.

iPhone 'VoiceOver' Feature Could Read Passwords Aloud iPhone 'VoiceOver' Feature Could Read Passwords Aloud

CVE-2024-44204 is one of two new Apple iOS security vulnerabilities that showcase an unexpected coming together of privacy snafus and accessibility features.

byNate Nelson, Contributing Writer

Oct 4, 2024

|

3 Min Read

A man in a suit clicking on a red button in a row of blue ones

Threat Intelligence

Insider Threat Damage Balloons as Visibility Gaps Widen Insider Threat Damage Balloons as Visibility Gaps Widen

byKristina Beek, Associate Editor, Dark Reading

Oct 4, 2024

5 Min Read

A galaxy full of stars

Threat Intelligence

Microsoft, DOJ Dismantle Russian Hacker Group Star Blizzard Microsoft, DOJ Dismantle Russian Hacker Group Star Blizzard

byNathan Eddy, Contributing Writer

Oct 4, 2024

3 Min Read

The North Korean and Cambodian flags

Cyberattacks & Data Breaches

DPRK's APT37 Targets Cambodia With Khmer, 'VeilShell' Backdoor DPRK's APT37 Targets Cambodia With Khmer, 'VeilShell' Backdoor

byNate Nelson, Contributing Writer

Oct 4, 2024

4 Min Read

Fiber optics background with lots of light spots

Endpoint Security

Thousands of DrayTek Routers at Risk From 14 Vulnerabilities Thousands of DrayTek Routers at Risk From 14 Vulnerabilities

byJai Vijayan, Contributing Writer

Oct 3, 2024

4 Min Read

Ivanti logo on the side of a beige building with blue windows

Threat Intelligence

CISA Adds High-Severity Ivanti Vulnerability to KEV Catalog CISA Adds High-Severity Ivanti Vulnerability to KEV Catalog

byDark Reading Staff

Oct 3, 2024

1 Min Read

Ukraine and Russia flags on a cracked wall

Cyberattacks & Data Breaches

Ukraine-Russia Cyber Battles Tip Over Into the Real World

Ukraine-Russia Cyber Battles Tip Over Into the Real World

byNathan Eddy, Contributing Writer

A cutout of a person's face on the left side and a photo with the face cut out on the right side with digital rendering where face would be

Endpoint Security

AI 'Nude Photo Generator' Delivers Infostealers Instead of Images

AI 'Nude Photo Generator' Delivers Infostealers Instead of Images

byElizabeth Montalbano, Contributing Writer

Chinese flag draped over surveillance camera

Cyberattacks & Data Breaches

China-Backed APT Group Culling Thai Government Data

China-Backed APT Group Culling Thai Government Data

byDark Reading Staff

A Linux sign

Threat Intelligence

Near-'perfctl' Fileless Malware Targets Millions of Linux Servers

Near-'perfctl' Fileless Malware Targets Millions of Linux Servers

byNate Nelson, Contributing Writer

Long-legged fly (Poecilobothrus sp) male on leaf with reflection in water

Vulnerabilities & Threats

North Korea's 'Stonefly' APT Swarms US Private Co's. for Profit

North Korea's 'Stonefly' APT Swarms US Private Co's. for Profit

byTara Seals, Managing Editor, News, Dark Reading

ICS/OT Security

NSA Releases 6 Principles of OT Cybersecurity

NSA Releases 6 Principles of OT Cybersecurity

byJennifer Lawinski, Contributing Writer

Spilled coffee with milk in a white cup and white background

Vulnerabilities & Threats

Unix Printing Vulnerabilities Enable Easy DDoS Attacks

Unix Printing Vulnerabilities Enable Easy DDoS Attacks

byJai Vijayan, Contributing Writer

Gray, black, and green snake with its head resting on its coiled up body

Endpoint Security

Python-Based Malware Slithers Into Systems via Legit VS Code

Python-Based Malware Slithers Into Systems via Legit VS Code

byElizabeth Montalbano, Contributing Writer

Global supply chain ships in stormy seas

Vulnerabilities & Threats

Manufacturers Rank as Ransomware's Biggest Target

Manufacturers Rank as Ransomware's Biggest Target

byKristina Beek, Associate Editor, Dark Reading

Futuristic cyber hacker operating under the guise of Anonymous

Cyberattacks & Data Breaches

Zimbra RCE Vuln Under Attack Needs Immediate Patching

Zimbra RCE Vuln Under Attack Needs Immediate Patching

byJai Vijayan, Contributing Writer

Someone tearing a roll of "I Voted" stickers

Vulnerabilities & Threats

Gov't, Judicial IT Systems Beset by Access Control Bugs

Gov't, Judicial IT Systems Beset by Access Control Bugs

byNate Nelson, Contributing Writer

Threat Intelligence

LockBit Associates Arrested, Evil Corp Bigwig Outed

LockBit Associates Arrested, Evil Corp Bigwig Outed

byDark Reading Staff

Three golden chickens in the grass

Cyberattacks & Data Breaches

Cyberattackers Use HR Targets to Lay More_Eggs Backdoor

Cyberattackers Use HR Targets to Lay More_Eggs Backdoor

byElizabeth Montalbano, Contributing Writer

Dubai UAE skyline with Burj Khalifa at dusk

Cyberattacks & Data Breaches

UAE, Saudi Arabia Become Plum Cyberattack Targets

UAE, Saudi Arabia Become Plum Cyberattack Targets

byRobert Lemos, Contributing Writer

A stylized crystal-looking judge's gavel with the letters AI standing behind it

Application Security

Calif. Gov. Vetoes AI Safety Bill Aimed at Big Tech Players

Calif. Gov. Vetoes AI Safety Bill Aimed at Big Tech Players

byJai Vijayan, Contributing Writer

Different US state license plates

Overtaxed State CISOs Struggle With Budgeting, Staffing

Overtaxed State CISOs Struggle With Budgeting, Staffing

byNate Nelson, Contributing Writer

A person's finger pressing a computer key in the colors of the Iran flag

Cyberattacks & Data Breaches

DoJ Charges 3 Iranian Hackers in Political 'Hack & Leak' Campaign

DoJ Charges 3 Iranian Hackers in Political 'Hack & Leak' Campaign

byKristina Beek, Associate Editor, Dark Reading

Scene of a power plant exterior

FERC Outlines Supply Chain Security Rules for Power Plants

FERC Outlines Supply Chain Security Rules for Power Plants

Cloud with lock in center, blue background

Application Security

Sloppy Entra ID Credentials Attract Hybrid Cloud Ransomware

Sloppy Entra ID Credentials Attract Hybrid Cloud Ransomware

byBecky Bracken, Senior Editor, Dark Reading

Senator Ben Cardin speaking into a microphone

Cyberattacks & Data Breaches

Elaborate Deepfake Operation Takes a Meeting With US Senator

Elaborate Deepfake Operation Takes a Meeting With US Senator

byKristina Beek, Associate Editor, Dark Reading

Shadow AI, Data Exposure Plague Workplace Chatbot Use

Shadow AI, Data Exposure Plague Workplace Chatbot Use

byTara Seals, Managing Editor, News, Dark Reading

Kia vehicles at dealership

Endpoint Security

Millions of Kia Vehicles Open to Remote Hacks via License Plate

Millions of Kia Vehicles Open to Remote Hacks via License Plate

byJai Vijayan, Contributing Writer

"ADMIN" written on a keyboard button

Vulnerabilities & Threats

Novel Exploit Chain Enables Windows UAC Bypass

Novel Exploit Chain Enables Windows UAC Bypass

byNate Nelson, Contributing Writer

Google Android figure standing on laptop keyboard with code onscreen

Application Security

Memory-Safe Code Adoption Has Made Android Safer

Memory-Safe Code Adoption Has Made Android Safer

byJai Vijayan, Contributing Writer

Vulnerabilities & Threats

Security Upgrades Available for 3 HPE Aruba Networking Bugs

Security Upgrades Available for 3 HPE Aruba Networking Bugs

byDark Reading Staff

A van with boxes flowing out of the back

Threat Intelligence

Transport, Logistics Orgs Hit by Stealthy Phishing Gambit

Transport, Logistics Orgs Hit by Stealthy Phishing Gambit

byNate Nelson, Contributing Writer

Concept illustration of AI, with a microchip with "AI" written on it and code snippets fading out

Application Security

Congress Advances Bill to Add AI to National Vulnerability Database

Congress Advances Bill to Add AI to NVD

byJennifer Lawinski, Contributing Writer

Busy rail station concourse in London

Cyberattacks & Data Breaches

Public Wi-Fi Compromised in UK Train Stations

Public Wi-Fi Compromised in UK Train Stations

byDark Reading Staff

Hurricane wind and rain pummeling palm trees on coast

Hurricane Helene Prompts CISA Fraud Warning

Hurricane Helene Prompts CISA Fraud Warning

byTara Seals, Managing Editor, News, Dark Reading

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.