News

Icon with shield and keyhole, over a digital background
Application Security
Unfixed Microsoft Entra ID Authentication Bypass Threatens Hybrid IDsUnfixed Microsoft Entra ID Authentication Bypass Threatens Hybrid IDs

The attack affects organizations that have synced multiple on-premises Active Directory domains to a single Azure tenant.

byJai Vijayan, Contributing Writer
Aug 15, 2024
|
4 Min Read
SolarWinds logo on a phone held up horizontally; background is blurred out
Vulnerabilities & Threats
SolarWinds: Critical RCE Bug Requires Urgent PatchSolarWinds: Critical RCE Bug Requires Urgent Patch
byDark Reading Staff
Aug 15, 2024
1 Min Read
An orange colored kitten standing in green grass and wildflowers
Cyberattacks & Data Breaches
Google: Iran's Charming Kitten Targets US Presidential Elections, Israeli MilitaryGoogle: Iran's Charming Kitten Targets US Presidential Elections, Israeli Military
byElizabeth Montalbano, Contributing Writer
Aug 15, 2024
5 Min Read
Colorful masks in a display
Threat Intelligence
Ransomware Group Behind Major Indonesian Attack Wears Many MasksRansomware Group Behind Major Indonesian Attack Wears Many Masks
byNate Nelson, Contributing Writer
Aug 15, 2024
3 Min Read
Old weather vane with dragon shape and blue sky
Cyberattacks & Data Breaches
'EastWind' Cyber-Spy Campaign Combines Various Chinese APT Tools'EastWind' Cyber-Spy Campaign Combines Various Chinese APT Tools
byJai Vijayan, Contributing Writer
Aug 14, 2024
3 Min Read
Sir Keir Starmer being interviewed by the press
Vulnerabilities & Threats
UK Royal Family, Prime Minister Deepfakes Make Rounds on MetaUK Royal Family, Prime Minister Deepfakes Make Rounds on Meta
byDark Reading Staff
Aug 14, 2024
1 Min Read
Computer screen showing GitHub logo
Сloud Security
GitHub Attack Vector Cracks Open Google, Microsoft, AWS Projects
GitHub Attack Vector Cracks Open Google, Microsoft, AWS Projects
Aug 14, 2024
|
4 Min Read
byElizabeth Montalbano, Contributing Writer
Computer keyboard and handcuffs.
Cyber Risk
Cybercriminal Leader 'J.P.Morgan' Busted for Pioneering RaaS Model
Cybercriminal Leader 'J.P.Morgan' Busted for Pioneering RaaS Model
Aug 14, 2024
|
1 Min Read
byDark Reading Staff
loud Gate AKA The Bean, Millennium Park, Chicago, Illinois
Cyberattacks & Data Breaches
DNC Credentials Compromised by 'IntelFetch' Telegram Bot
DNC Credentials Compromised by 'IntelFetch' Telegram Bot
Aug 14, 2024
|
4 Min Read
byNathan Eddy, Contributing Writer
Aerial shot of McLaren Northern Michigan Hospital
Cyberattacks & Data Breaches
Inc Ransomware Encryptor Contains Keys to Victim Data Recovery
Inc Ransomware Encryptor Contains Keys to Victim Data Recovery
Aug 14, 2024
|
4 Min Read
byNate Nelson, Contributing Writer
A fine gold bar
Cyberattacks & Data Breaches
Gold Mining Company Struck by Ransomware Attack
Gold Mining Company Struck by Ransomware Attack
Aug 13, 2024
|
1 Min Read
byDark Reading Staff
A Windows security update onscreen
Vulnerabilities & Threats
Microsoft Discloses 10 Zero-Day Bugs in Patch Tuesday Update
Microsoft Discloses 10 Zero-Day Bugs in Patch Tuesday Update
Aug 13, 2024
|
5 Min Read
byJai Vijayan, Contributing Writer
theoretical image of a quantum chip
Endpoint Security
NIST Finalizes Post-Quantum Encryption Standards
NIST Finalizes Post-Quantum Encryption Standards
Aug 13, 2024
|
2 Min Read
byJennifer Lawinski, Contributing Writer
A judge banging a gavel
Cybersecurity Operations
Cybercriminal Duo Attracts FBI Notice by Spending Big & Living Large
Cybercriminal Duo Attracts FBI Notice by Spending Big & Living Large
Aug 13, 2024
|
1 Min Read
byDark Reading Staff
A line of ants; white background
Remote Workforce
Critical Ivanti vTM Bug Allows Unauthorized Admin Access
Critical Ivanti vTM Bug Allows Unauthorized Admin Access
Aug 13, 2024
|
2 Min Read
byNate Nelson, Contributing Writer
Healthcare chatbot conversation with smartphone screen app interface and artificial intelligence
Application Security
Microsoft Azure AI Health Bot Infected With Critical Vulnerabilities
Microsoft Azure AI Health Bot Infected With Critical Vulnerabilities
Aug 13, 2024
|
3 Min Read
byNathan Eddy, Contributing Writer
People in red hoodies with shadows on their faces and several yellow stars
Cyberattacks & Data Breaches
APT41 Spinoff Expands Chinese Actor's Scope Beyond Asia
APT41 Spinoff Expands Chinese Actor's Scope Beyond Asia
Aug 13, 2024
|
4 Min Read
byElizabeth Montalbano, Contributing Writer
The word "ransomware" in black like it was stamped on and under it a red padlock next to a gold coin with the Bitcoin symbol on it
Cyberattacks & Data Breaches
FBI Shuts Down Dozens of Radar/Dispossessor Ransomware Servers
FBI Shuts Down Dozens of Radar/Dispossessor Ransomware Servers
Aug 13, 2024
|
3 Min Read
byElizabeth Montalbano, Contributing Writer
The UN flag
Cyberattacks & Data Breaches
UN Approves Cybercrime Treaty Despite Major Tech, Privacy Concerns
UN Approves Cybercrime Treaty Despite Major Tech, Privacy Concerns
Aug 12, 2024
|
4 Min Read
byRobert Lemos, Contributing Writer
AMD logo on a trade show floor
Remote Workforce
AMD Issues Updates for Silicon-Level 'SinkClose' Processor Flaw
AMD Issues Updates for Silicon-Level 'SinkClose' Processor Flaw
Aug 12, 2024
|
4 Min Read
byJai Vijayan, Contributing Writer
Four fish hooks in water
Vulnerabilities & Threats
Ukraine CERT: Mass Phishing Campaign Poses as Nation's Security Service
Ukraine CERT: Phishing Campaign Poses as Nation's Security Service
Aug 12, 2024
|
1 Min Read
byDark Reading Staff
Windows blue screen of death
Vulnerabilities & Threats
CLFS Bug Crashes Even Updated Windows 10, 11 Systems
CLFS Bug Crashes Even Updated Windows 10, 11 Systems
Aug 12, 2024
|
3 Min Read
byNate Nelson, Contributing Writer
A laptop in front of a DPRK flag
Remote Workforce
Tennessee Man Helped DPRK Workers Get Jobs at US Orgs, Fund WMDs
Tennessee Man Helped DPRK Workers Get Jobs at US Orgs, Fund WMDs
Aug 12, 2024
|
5 Min Read
byNate Nelson, Contributing Writer
Farm of solar panels reflecting sunlight
ICS/OT Security
Solar Power Installations Worldwide Open to Cloud API Bugs
Solar Power Installations Worldwide Open to Cloud API Bugs
Aug 9, 2024
|
4 Min Read
byJai Vijayan, Contributing Writer
Lorenzo Franceschi-Bicchierai, Robert McMillan, Sadia Mirza, and Sherri Davidoff on stage at Black Hat
Cyberattacks & Data Breaches
Media & Victims Find Common Ground Against Hackers
Media & Victims Find Common Ground Against Hackers
Aug 9, 2024
|
4 Min Read
byKristina Beek, Associate Editor, Dark Reading
CrowdStrike logo on a phone screen with the website on a computer screen blurred out in the background
Cyber Risk
CrowdStrike's Legal Pressures Mount, Could Blaze Path to Liability
CrowdStrike's Legal Pressures Mount, Could Blaze Path to Liability
Aug 8, 2024
|
6 Min Read
byRobert Lemos, Contributing Writer
A digital brain schematic
Application Security
How to Weaponize Microsoft Copilot for Cyberattackers
How to Weaponize Microsoft Copilot for Cyberattackers
Aug 8, 2024
|
6 Min Read
byJeffrey Schwartz, Contributing Writer
Ann Johnson, Corporate Vice President and Deputy CISO at Microsoft, and Sherrod DeGrippo, Dir. of Threat Intelligence Strategy at Microsoft, on stage
Cybersecurity Operations
Microsoft on CISOs: Thriving Community Means Stronger Security
Microsoft on CISOs: Thriving Community Means Stronger Security
Aug 8, 2024
|
4 Min Read
byKristina Beek, Associate Editor, Dark Reading
The word "browser" with icons of various browsers below it
Cyberattacks & Data Breaches
'0.0.0.0 Day' Flaw Puts Chrome, Firefox, Mozilla Browsers at RCE Risk
'0.0.0.0 Day' Flaw Puts Chrome, Firefox, Mozilla Browsers at RCE Risk
Aug 8, 2024
|
4 Min Read
byElizabeth Montalbano, Contributing Writer
Hand pointing at icon labeled SaaS; various other icons surround it
Application Security
SaaS Apps Present an Abbreviated Kill Chain for Attackers
SaaS Apps Present an Abbreviated Kill Chain for Attackers
Aug 8, 2024
|
4 Min Read
byJai Vijayan, Contributing Writer
sun behind a cloud creating shadows
Remote Workforce
Critical AWS Vulnerabilities Allow S3 Attack Bonanza
Critical AWS Vulnerabilities Allow S3 Attack Bonanza
Aug 8, 2024
|
5 Min Read
byJeffrey Schwartz, Contributing Writer
A hand with a tiny Earth hanging from a string
Application Security
Hazy Issue in Entra ID Allows Privileged Users to Become Global Admins
Hazy Issue in Entra ID Allows Privileged Users to Become Global Admins
Aug 7, 2024
|
4 Min Read
byNate Nelson, Contributing Writer
CrowdStrike logo seen on screen of smartphone and the word OUTAGE seen behind it
Cyber Risk
CrowdStrike Will Give Customers Control Over Falcon Sensor Updates
CrowdStrike Will Give Customers Control Over Falcon Sensor Updates
Aug 7, 2024
|
3 Min Read
byJai Vijayan, Contributing Writer
Founder and CTO of Knostic, Sounil Yu, collecting his award onstage
Cybersecurity Operations
Knostic Wins 2024 Black Hat Startup Spotlight Competition
Knostic Wins 2024 Black Hat Startup Spotlight Competition
Aug 7, 2024
|
4 Min Read
byKristina Beek, Associate Editor, Dark Reading
A green chameleon sitting on a branch
Endpoint Security
Chameleon Banking Trojan Makes a Comeback Cloaked as CRM App
Chameleon Banking Trojan Makes a Comeback Cloaked as CRM App
Aug 7, 2024
|
4 Min Read
byElizabeth Montalbano, Contributing Writer

Editor's Choice

A filing cabinet folder labeled "Startups"
Cybersecurity Operations
When Startup Founders Should Start Thinking About CybersecurityWhen Startups Should Think About Cybersecurity
byNate Nelson, Contributing Writer
Sep 12, 2024
6 Min Read
Black background and white text saying Dark Reading Confidential
Vulnerabilities & Threats
Dark Reading Confidential: Pen Test Arrests, Five Years LaterDark Reading Confidential: Pen Test Arrests, Five Years Later
byDark Reading Staff
Sep 10, 2024
42 Min Listen
Yellow spider with black stripes and black and yellow legs perched on a web
Сloud Security
Socially Savvy Scattered Spider Traps Cloud Admins in WebSocially Savvy Scattered Spider Traps Cloud Admins in Web
byElizabeth Montalbano, Contributing Writer
Sep 12, 2024
4 Min Read
Reports
More Reports
Webinars
More Webinars
White Papers
More Whitepapers
Events
More Events
Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
Subscribe