Vulnerabilities & Threats

More Topics

Insider Threats

Red bot amid a field of green bots

Vulnerabilities & Threats

Will 2025 See a Rise of NHI Attacks?Will 2025 See a Rise of NHI Attacks?

The flurry of non-human identity attacks at the end of 2024 demonstrates extremely strong momentum heading into the new year. That does not bode well.

byItzik Alvas, Co-Founder & CEO, Entro Security

Jan 22, 2025

|

1 Min Read

A hooded figure sitting in front of laptop

Cyberattacks & Data Breaches

DONOT Group Deploys Malicious Android Apps in India DONOT Group Deploys Malicious Android Apps in India

byJai Vijayan, Contributing Writer

Jan 21, 2025

1 Min Read

Group of people standing around a person sitting at a computer, showing money and other objects.

Remote Workforce

Name That Toon: Incentives Name That Toon: Incentives

byJohn Klossner

Jan 20, 2025

1 Min Read

Car component microchips

Vulnerabilities & Threats

US Ban on Automotive Components Could Curb Supply Chain US Ban on Automotive Components Could Curb Supply Chain

byRobert Lemos, Contributing Writer

Jan 20, 2025

1 Min Read

The letters "AI" in blue text with binary code running over top and in the background

Threat Intelligence

Employees Enter Sensitive Data Into GenAI Prompts Far Too Often Employees Enter Sensitive Data Into GenAI Prompts Far Too Often

byKristina Beek, Associate Editor, Dark Reading

Jan 17, 2025

1 Min Read

Fortinet's logo on the face of an office building

Endpoint Security

15K Fortinet Device Configs Leaked to the Dark Web 15K Fortinet Device Configs Leaked to the Dark Web

byNate Nelson, Contributing Writer

Jan 17, 2025

1 Min Read

The letters LLM on a digital background with an artificial brain in the foreground

Vulnerabilities & Threats

Leveraging Behavioral Insights to Counter LLM-Enabled Hacking

Leveraging Behavioral Insights to Counter LLM-Enabled Hacking

byAybars Tuncdogan, Oguz A. Acar

The Kazakh and Russian flags

Cyberattacks & Data Breaches

Russian APT Phishes Kazakh Gov't for Strategic Intel

Russian APT Phishes Kazakh Gov't for Strategic Intel

byNate Nelson, Contributing Writer

Biden meeting on cybersecurity with business leaders

Threat Intelligence

Biden's Cybersecurity EO Leaves Trump a Comprehensive Blueprint for Defense

Biden's Cyber EO Leaves Trump a Strong Blueprint for Defense

byBecky Bracken, Senior Editor, Dark Reading

Vulnerabilities & Threats

Strategic Approaches to Threat Detection, Investigation & Response

Strategic Approaches to Threat Detection, Investigation & Response

bySameer Bhanushali, Lead Engineer/IAM Architect, Paramount Global

A shoe polish kit

Vulnerabilities & Threats

Trusted Apps Sneak a Bug Into the UEFI Boot Process

Trusted Apps Sneak a Bug Into the UEFI Boot Process

byNate Nelson, Contributing Writer

Vulnerabilities & Threats

Attackers Hijack Google Advertiser Accounts to Spread Malware

Attackers Hijack Google Advertiser Accounts to Spread Malware

byJai Vijayan, Contributing Writer

A series of binary code in orange and blue colors

Vulnerabilities & Threats

CISA: Second BeyondTrust Vulnerability Added to KEV Catalog

CISA: Second BeyondTrust Vulnerability Added to KEV Catalog

byKristina Beek, Associate Editor, Dark Reading

The North Korean flag on the key of a computer keyboard with a fingerprint on it in between the H and K keys

Threat Intelligence

North Korea's Lazarus APT Evolves Developer-Recruitment Attacks

North Korea's Lazarus Evolves Developer-Recruitment Attacks

byElizabeth Montalbano, Contributing Writer

Globe with LLM-related icons, with the words Large Language Models underneath

Vulnerabilities & Threats

OWASP's New LLM Top 10 Shows Emerging AI Threats

OWASP's New LLM Top 10 Shows Emerging AI Threats

byMatias Madou, Co-Founder & CTO, Secure Code Warrior

Closed padlock on digital background

Application Security

Microsoft Rings in 2025 With Record Security Update

Microsoft Rings in 2025 With Record Security Update

byJai Vijayan, Contributing Writer

An apple tree with roots growing underground

Vulnerabilities & Threats

Apple Bug Allows Root Protections Bypass Without Physical Access

Apple Bug Allows Root Protections Bypass Without Physical Access

byBecky Bracken, Senior Editor, Dark Reading

A white device with the word Fortinet written on it against a red background

Threat Intelligence

Zero-Day Security Bug Likely Fueling Fortinet Firewall Attacks

Zero-Day Bug Likely Fueling Fortinet Firewall Attacks

byElizabeth Montalbano, Contributing Writer

Application Security

Microsoft Cracks Down on Malicious Copilot AI Use

Microsoft Cracks Down on Malicious Copilot AI Use

byKristina Beek, Associate Editor, Dark Reading

Amelia Earhart in her Lockheed L-10E Electra preparing for 27,000 mile globe flight in 1937

Сloud Security

Cloud Attackers Exploit Max-Critical Aviatrix RCE Flaw

Cloud Attackers Exploit Max-Critical Aviatrix RCE Flaw

byJai Vijayan, Contributing Writer

Cyberattacks & Data Breaches

Telefonica Breach Exposes Jira Tickets, Customer Data

Telefonica Breach Exposes Jira Tickets, Customer Data

byKristina Beek, Associate Editor, Dark Reading

Door opening surrounded by code

Vulnerabilities & Threats

The Shifting Landscape of Open Source Security

The Shifting Landscape of Open Source Security

byChristopher Robinson, Chief Security Architect, Open Source Security Foundation

A dictionary listing for "deja vu"

Vulnerabilities & Threats

Threat Actors Exploit a Critical Ivanti RCE Bug, Again

Threat Actors Exploit a Critical Ivanti RCE Bug, Again

byNate Nelson, Contributing Writer

A banshee haunting a man, from a 19th century lithograph

Threat Intelligence

Banshee 2.0 Malware Steals Apple's Encryption to Hide on Macs

Banshee 2.0 Malware Steals Apple's Encryption to Hide on Macs

byNate Nelson, Contributing Writer

The letters AI made out of binary code

Vulnerabilities & Threats

New AI Challenges Will Test CISOs & Their Teams in 2025

New AI Challenges Will Test CISOs & Their Teams in 2025

byJosh Lemos, CISO, GitLab

Green Bay Packers' fans cheer during a game against the Indianapolis Colts in Green Bay, Wisconsin

Cyberattacks & Data Breaches

Green Bay Packers' Online Pro Shop Sacked by Payment Skimmer

Green Bay Packers' Online Pro Shop Sacked by Payment Skimmer

byTara Seals, Managing Editor, News, Dark Reading

PayPal website page open on a computer screen displaying how people can send money using the service

Threat Intelligence

Unconventional Cyberattacks Aim to Take Over PayPal Accounts

Unconventional Cyberattacks Aim to Take Over PayPal Accounts

byElizabeth Montalbano, Contributing Writer

Programming code in blue on a black background

Vulnerabilities & Threats

Best Practices & Risks Considerations in LCNC and RPA Automation

Best Practices in LCNC & RPA Automation

byJordan Bonagura, Senior Security Consultant, Secure Ideas

Close up of the US Treasury Building on the back of the US $10 bill

Cyberattacks & Data Breaches

CISA: Third-Party Data Breach Limited to Treasury Dept.

CISA: Third-Party Data Breach Limited to Treasury Dept.

byKristina Beek, Associate Editor, Dark Reading

Threat Intelligence

PhishWP Plug-in Hijacks WordPress E-Commerce Checkouts

PhishWP Plug-in Hijacks WordPress E-Commerce Checkouts

byElizabeth Montalbano, Contributing Writer

Two people standing in front of a robot and looking at a person inside the robot's torso.

Identity & Access Management Security

Name That Edge Toon: Greetings and Salutations

Name That Edge Toon: Greetings and Salutations

byJohn Klossner, Cartoonist

White House at dusk

Vulnerabilities & Threats

Cybercriminals Don't Care About National Cyber Policy

Cybercriminals Don't Care About National Cyber Policy

byChristy Wyatt, President & Chief Executive Officer, Absolute Security

Amit Yoran in a dark sweater standing in front of a window

Сloud Security

In Appreciation: Amit Yoran, Tenable CEO, Passes Away

In Appreciation: Amit Yoran, Tenable CEO, Passes Away

byDark Reading Staff, Dark Reading

A camera lens on red background

Cyberattacks & Data Breaches

FireScam Android Spyware Campaign Poses 'Significant Threat Worldwide'

Android Spyware Campaign Poses 'Significant Threat Worldwide'

byBecky Bracken, Senior Editor, Dark Reading

Yellow and black bee on a pink flower

Cyberattacks & Data Breaches

EagerBee Backdoor Takes Flight Against Mideast ISPs, Government Targets

EagerBee Backdoor Takes Flight Against Mideast Targets

byElizabeth Montalbano, Contributing Writer

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.