Vulnerabilities & Threats

More Topics

Insider Threats

Gallup Organization sign

Vulnerabilities & Threats

Gallup Poll Bugs Open Door to Election Misinformation Gallup Poll Bugs Open Door to Election Misinformation

Researchers flagged a pair of Gallup polling site XSS vulnerabilities that could have allowed malicious actors to execute arbitrary code, access sensitive data, or take over a victim account.

byBecky Bracken, Senior Editor, Dark Reading

Sep 10, 2024

|

2 Min Read

SonicWall logo on company building wall

ICS/OT Security

Akira Ransomware Actors Exploit SonicWall Bug for RCE Akira Ransomware Actors Exploit SonicWall Bug for RCE

byJai Vijayan, Contributing Writer

Sep 9, 2024

3 Min Read

Two people standing at an Avis car rental counter speaking to an employee behind the desk

Cyberattacks & Data Breaches

300K Victims' Data Compromised in Avis Car Rental Breach 300K Victims' Data Compromised in Avis Car Rental Breach

byDark Reading Staff

Sep 9, 2024

1 Min Read

Padlock on wooden door; hinge reads: ENDPOINT SECURITY

Endpoint Security

How to Establish & Enhance Endpoint Security How to Establish & Enhance Endpoint Security

Sep 9, 2024

4 Min Read

Military drone with a bomb at sunset

ICS/OT Security

'TIDrone' Cyberattackers Target Taiwan's Drone Manufacturers 'TIDrone' Cyberattackers Target Taiwan's Drone Manufacturers

byTara Seals, Managing Editor, News, Dark Reading

Sep 9, 2024

1 Min Read

Rows of hooded figures beside laptops. The background behind them is the Russian flag

ICS/OT Security

Feds Warn on Russian Actors Targeting Critical Infrastructure Feds Warn on Russian Actors Targeting Critical Infrastructure

byDark Reading Staff

Sep 6, 2024

1 Min Read

An eyeball looking at data

Threat Intelligence

Commercial Spyware Use Roars Back Despite Sanctions

Commercial Spyware Use Roars Back Despite Sanctions

byBecky Bracken, Senior Editor, Dark Reading

High-voltage wires against a blue sky, with digital artifacts added

Vulnerabilities & Threats

Using Transparency & Sharing to Defend Critical Infrastructure

Using Transparency & Sharing to Defend Critical Infrastructure

byTravis Galloway

Vulnerabilities & Threats

HackerOne Appoints Kara Sprague As CEO

HackerOne Appoints Kara Sprague As CEO

Blue code on a black screen creating the shape of a skull

Cyberattacks & Data Breaches

Chinese 'Tropic Trooper' APT Targets Mideast Governments

Chinese 'Tropic Trooper' APT Targets Mideast Governments

byDark Reading Staff

A green door with four-paneled window and white curtain in a tan brick house

Threat Intelligence

China's 'Earth Lusca' Propagates Multiplatform Backdoor

China's 'Earth Lusca' Propagates Multiplatform Backdoor

byElizabeth Montalbano, Contributing Writer

Indian soldiers marching

Threat Intelligence

Indian Army Propaganda Spread by 1.4K AI-Powered Social Media Accounts

Indian Army Propaganda Spread by 1.4K AI-Powered Social Media Accounts

byNate Nelson, Contributing Writer

Programming code abstract image

Application Security

'Revival Hijack' on PyPI Disguises Malware With Legitimate File Names

'Revival Hijack' on PyPI Disguises Malware With Legitimate File Names

byJai Vijayan, Contributing Writer

North Korean flag replacing a key on a keyboard with a fingerprint in the middle of it and other letter keys around it

Threat Intelligence

FBI: North Korean Actors Readying Aggressive Cyberattack Wave

FBI: North Korean Actors Readying Aggressive Cyberattack Wave

byElizabeth Montalbano, Contributing Writer

Chrome browser

Vulnerabilities & Threats

North Korea's 'Citrine Sleet' APT Exploits Zero-Day Chromium Bug

North Korea's 'Citrine Sleet' APT Exploits Zero-Day Chromium Bug

byNate Nelson, Contributing Writer

A judge's hand holding a gavel next to a stack of files.

Cyberattacks & Data Breaches

City of Columbus Sues Researcher After Ransomware Attack

City of Columbus Sues Researcher After Ransomware Attack

byDark Reading Staff

A close-up of search engine results page relating to news and business

Threat Intelligence

Cyberattackers Spoof Palo Alto VPNs to Spread WikiLoader Variant

Cyberattackers Spoof Palo Alto VPNs to Spread WikiLoader Variant

byDark Reading Staff

Threat Intelligence

Evolving npm Package Campaign Targets Roblox Devs, for Years

Evolving npm Package Campaign Targets Roblox Devs, for Years

byElizabeth Montalbano, Contributing Writer

Metal chain with broken link

Vulnerabilities & Threats

Improved Software Supply Chain Resilience Equals Increased Security

Improved Software Supply Chain Resilience Equals Increased Security

Come up with cybersecurity-related caption for man standing at ATM holding can of bug spray and saying something to woman in front of him

Application Security

Name That Edge Toon: Bug Off

Name That Edge Toon: Bug Off

byJohn Klossner, Cartoonist

A map of the world imposed of binary code

Ransomware Gangs Pummel Southeast Asia

Ransomware Gangs Pummel Southeast Asia

byRobert Lemos, Contributing Writer

Storks and white pelicans at a watering hole in Tanzania.

Threat Intelligence

Commercial Spyware Vendors Have a Copycat in Top Russian APT

Commercial Spyware Vendors Have a Copycat in Top Russian APT

byDark Reading Staff

Woman in blue hat, blue jeans and a sweatshirt using a laptop and mobile device sitting on a beach against an orange roller bag with stickers on it

Threat Intelligence

Top Travel Sites Have Some First-Class Security Issues to Clean Up

Top Travel Sites Have Some First-Class Security Issues to Clean Up

byElizabeth Montalbano, Contributing Writer

Threat Intelligence

Exploited: CISA Highlights Apache OFBiz Flaw After PoC Emerges

Exploited: CISA Highlights Apache OFBiz Flaw After PoC Emerges

byKristina Beek, Associate Editor, Dark Reading

Person holding a cellphone; black background

Vulnerabilities & Threats

How Telecom Vulnerabilities Can Be a Threat to Cybersecurity Posture

How Telecom Vulnerabilities Can Be a Threat to Cybersecurity Posture

WPS app on a smartphone screen

Vulnerabilities & Threats

South Korean APT Exploits 1-Click WPS Office Bug, Nabs Chinese Intel

South Korean APT Exploits 1-Click WPS Office Bug, Nabs Chinese Intel

byNate Nelson, Contributing Writer

3D ones and zeros in different colors

Threat Intelligence

Attackers Exploit Critical Atlassian Confluence Flaw for Cryptojacking

Attackers Exploit Critical Atlassian Confluence Flaw for Cryptojacking

byElizabeth Montalbano, Contributing Writer

Operator using virtual screen presses text: SCADA. Supervisory Control And Data Acquisition ( SCADA )

ICS/OT Security

Hitachi Energy Vulnerabilities Plague SCADA Power Systems

Hitachi Energy Vulnerabilities Plague SCADA Power Systems

byJai Vijayan, Contributing Writer

A fishhook laid atop the enter key on a computer keyboard

ICS/OT Security

Manufacturing Sector Under Fire From Microsoft Credential Thieves

Manufacturing Sector Under Fire From Microsoft Credential Thieves

byDark Reading Staff

Tip of an iceberg with a view of the larger iceberg out of sight

Vulnerabilities & Threats

Why LLMs Are Just the Tip of the AI Security Iceberg

Why LLMs Are Just the Tip of the AI Security Iceberg

A brain with computer code beside it

Application Security

Hundreds of LLM Servers Expose Corporate, Health & Other Online Data

Hundreds of LLM Servers Expose Corporate, Health & Other Online Data

byNate Nelson, Contributing Writer

The skyline of Harare City in Zimbabwe

Cybersecurity Operations

Zimbabwe Trains Government Officials in Cybersecurity Skills

Zimbabwe Trains Government Officials in Cybersecurity Skills

byDark Reading Staff

A person's finger about to click on a screen that says Windows 11 with a blue abstract background behind it

Vulnerabilities & Threats

PoC Exploit for Zero-Click Vulnerability Made Available to the Masses

PoC Exploit for Zero-Click Vulnerability Made Available to the Masses

byDark Reading Staff

Vulnerabilities & Threats

Microsoft's Sway Serves as Launchpad for 'Quishing' Campaign

Microsoft's Sway Serves as Launchpad for 'Quishing' Campaign

byDark Reading Staff

Rubber stamp labeled "CONFIDENTIAL"

Cyberattacks & Data Breaches

Why Every Business Should Prioritize Confidential Computing

Why Every Business Should Prioritize Confidential Computing

byPankaj Mendki

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.