Vulnerabilities & Threats

More Topics

Insider Threats

A shoe polish kit

Vulnerabilities & Threats

Trusted Apps Sneak a Bug Into the UEFI Boot Process Trusted Apps Sneak a Bug Into the UEFI Boot Process

Seven system recovery programs contained what amounted to a backdoor for injecting any untrusted file into the system startup process.

byNate Nelson, Contributing Writer

Jan 16, 2025

|

1 Min Read

Google Ads logo on a smartphone screen

Vulnerabilities & Threats

Attackers Hijack Google Advertiser Accounts to Spread Malware Attackers Hijack Google Advertiser Accounts to Spread Malware

byJai Vijayan, Contributing Writer

Jan 15, 2025

1 Min Read

A series of binary code in orange and blue colors

Vulnerabilities & Threats

CISA: Second BeyondTrust Vulnerability Added to KEV Catalog CISA: Second BeyondTrust Vulnerability Added to KEV Catalog

byKristina Beek, Associate Editor, Dark Reading

Jan 15, 2025

1 Min Read

The North Korean flag on the key of a computer keyboard with a fingerprint on it in between the H and K keys

Threat Intelligence

North Korea's Lazarus APT Evolves Developer-Recruitment Attacks North Korea's Lazarus Evolves Developer-Recruitment Attacks

byElizabeth Montalbano, Contributing Writer

Jan 15, 2025

1 Min Read

Globe with LLM-related icons, with the words Large Language Models underneath

Vulnerabilities & Threats

OWASP's New LLM Top 10 Shows Emerging AI Threats OWASP's New LLM Top 10 Shows Emerging AI Threats

Jan 15, 2025

1 Min Read

Closed padlock on digital background

Application Security

Microsoft Rings in 2025 With Record Security Update Microsoft Rings in 2025 With Record Security Update

byJai Vijayan, Contributing Writer

Jan 14, 2025

1 Min Read

An apple tree with roots growing underground

Vulnerabilities & Threats

Apple Bug Allows Root Protections Bypass Without Physical Access

Apple Bug Allows Root Protections Bypass Without Physical Access

byBecky Bracken, Senior Editor, Dark Reading

A white device with the word Fortinet written on it against a red background

Threat Intelligence

Zero-Day Security Bug Likely Fueling Fortinet Firewall Attacks

Zero-Day Bug Likely Fueling Fortinet Firewall Attacks

byElizabeth Montalbano, Contributing Writer

Application Security

Microsoft Cracks Down on Malicious Copilot AI Use

Microsoft Cracks Down on Malicious Copilot AI Use

byKristina Beek, Associate Editor, Dark Reading

Amelia Earhart in her Lockheed L-10E Electra preparing for 27,000 mile globe flight in 1937

Сloud Security

Cloud Attackers Exploit Max-Critical Aviatrix RCE Flaw

Cloud Attackers Exploit Max-Critical Aviatrix RCE Flaw

byJai Vijayan, Contributing Writer

Cyberattacks & Data Breaches

Telefonica Breach Exposes Jira Tickets, Customer Data

Telefonica Breach Exposes Jira Tickets, Customer Data

byKristina Beek, Associate Editor, Dark Reading

Door opening surrounded by code

Vulnerabilities & Threats

The Shifting Landscape of Open Source Security

The Shifting Landscape of Open Source Security

byChristopher Robinson, Chief Security Architect, Open Source Security Foundation

A dictionary listing for "deja vu"

Vulnerabilities & Threats

Threat Actors Exploit a Critical Ivanti RCE Bug, Again

Threat Actors Exploit a Critical Ivanti RCE Bug, Again

byNate Nelson, Contributing Writer

A banshee haunting a man, from a 19th century lithograph

Threat Intelligence

Banshee 2.0 Malware Steals Apple's Encryption to Hide on Macs

Banshee 2.0 Malware Steals Apple's Encryption to Hide on Macs

byNate Nelson, Contributing Writer

The letters AI made out of binary code

Vulnerabilities & Threats

New AI Challenges Will Test CISOs & Their Teams in 2025

New AI Challenges Will Test CISOs & Their Teams in 2025

byJosh Lemos, CISO, GitLab

Green Bay Packers' fans cheer during a game against the Indianapolis Colts in Green Bay, Wisconsin

Cyberattacks & Data Breaches

Green Bay Packers' Online Pro Shop Sacked by Payment Skimmer

Green Bay Packers' Online Pro Shop Sacked by Payment Skimmer

byTara Seals, Managing Editor, News, Dark Reading

PayPal website page open on a computer screen displaying how people can send money using the service

Threat Intelligence

Unconventional Cyberattacks Aim to Take Over PayPal Accounts

Unconventional Cyberattacks Aim to Take Over PayPal Accounts

byElizabeth Montalbano, Contributing Writer

Programming code in blue on a black background

Vulnerabilities & Threats

Best Practices & Risks Considerations in LCNC and RPA Automation

Best Practices in LCNC & RPA Automation

byJordan Bonagura, Senior Security Consultant, Secure Ideas

Close up of the US Treasury Building on the back of the US $10 bill

Cyberattacks & Data Breaches

CISA: Third-Party Data Breach Limited to Treasury Dept.

CISA: Third-Party Data Breach Limited to Treasury Dept.

byKristina Beek, Associate Editor, Dark Reading

Threat Intelligence

PhishWP Plug-in Hijacks WordPress E-Commerce Checkouts

PhishWP Plug-in Hijacks WordPress E-Commerce Checkouts

byElizabeth Montalbano, Contributing Writer

Two people standing in front of a robot and looking at a person inside the robot's torso.

Identity & Access Management Security

Name That Edge Toon: Greetings and Salutations

Name That Edge Toon: Greetings and Salutations

byJohn Klossner, Cartoonist

White House at dusk

Vulnerabilities & Threats

Cybercriminals Don't Care About National Cyber Policy

Cybercriminals Don't Care About National Cyber Policy

byChristy Wyatt, President & Chief Executive Officer, Absolute Security

Amit Yoran in a dark sweater standing in front of a window

Сloud Security

In Appreciation: Amit Yoran, Tenable CEO, Passes Away

In Appreciation: Amit Yoran, Tenable CEO, Passes Away

byDark Reading Staff, Dark Reading

A camera lens on red background

Cyberattacks & Data Breaches

FireScam Android Spyware Campaign Poses 'Significant Threat Worldwide'

Android Spyware Campaign Poses 'Significant Threat Worldwide'

byBecky Bracken, Senior Editor, Dark Reading

Yellow and black bee on a pink flower

Cyberattacks & Data Breaches

EagerBee Backdoor Takes Flight Against Mideast ISPs, Government Targets

EagerBee Backdoor Takes Flight Against Mideast Targets

byElizabeth Montalbano, Contributing Writer

Overlay indicating the use of IoT (Internet of Things) on top of a city skyline

ICS/OT Security

IoT's Regulatory Reckoning Is Overdue

IoT's Regulatory Reckoning Is Overdue

byCarsten Rhod Gregersen, CEO & Founder, Nabto

AI code generation keyboard developer

Application Security

Will AI Code Generators Overcome Their Insecurities This Year?

Will AI Code Generators Overcome Their Insecurities This Year?

byRobert Lemos, Contributing Writer

Sharks circling a computer

Threat Intelligence

Thousands of BeyondTrust Systems Remain Exposed

Thousands of BeyondTrust Systems Remain Exposed

byBecky Bracken, Senior Editor, Dark Reading

"HIPAA Violation" written on a form, surrounded by medical supplies

Vulnerabilities & Threats

New HIPAA Cybersecurity Rules Pull No Punches

New HIPAA Cybersecurity Rules Pull No Punches

byNate Nelson, Contributing Writer

The letters AI filled with a design that looks like a circuit board, with the words "ARTIFICIAL INTELLIGENCE" underneath

Vulnerabilities & Threats

Why Small Businesses Can't Rely Solely on AI to Combat Threats

Why Small Businesses Can't Rely Solely on AI to Combat Threats

byJohn Mutuski, CISO, Pipedrive

Chrome browser extension app on an iPhone

Application Security

Chrome Extension Compromises Highlight Software Supply Challenges

Chrome Extension Compromises Highlight Software Supply Challenges

byRobert Lemos, Contributing Writer

Servers falling down sideways

Vulnerabilities & Threats

Unpatched Active Directory Flaw Can Crash Any Microsoft Server

Unpatched Active Directory Flaw Can Crash Any Microsoft Server

byBecky Bracken, Senior Editor, Dark Reading

The letters "LLM" in gray and purple 3D with the words "large language model" written underneath

Cyberattacks & Data Breaches

'Bad Likert Judge' Jailbreak Bypasses Guardrails of OpenAI, Other Top LLMs

'Bad Likert Judge' Jailbreak Bypasses Guardrails of OpenAI, Other LLMs

byElizabeth Montalbano, Contributing Writer

map of the middle east in with digital overlay

Vulnerabilities & Threats

Cybersecurity Lags in Middle East Business Development

Cybersecurity Lags in Middle East Business Development

byPartha Gopalakrishnan, Founder, PG Advisors Ltd.

Person holding pen points it toward a red shield with a yellow checkmark; dark background

How to Get the Most Out of Cyber Insurance

How to Get the Most Out of Cyber Insurance

byRita Gurevich, CEO & Founder, SPHERE

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.