Vulnerabilities & Threats

More Topics

Insider Threats

Сloud Security

'SteelFox' Malware Blitz Infects 11K Victims With Bundle of Pain 'SteelFox' Malware Blitz Infects 11K Victims With Bundle of Pain

The malware combines a miner and data stealer, and it packs functions that make detection and mitigation a challenge.

byJai Vijayan, Contributing Writer

Nov 7, 2024

|

1 Min Read

A screen full of code that has already been written

Application Security

Symbiotic Security Launches Scanning Tool to Help Fix Flaws in Code Symbiotic Security Launches Scanning Tool to Fix Flaws in Code

byFahmida Y. Rashid, Managing Editor, Features, Dark Reading

Nov 7, 2024

1 Min Read

Video gamers in a multiplayer head-to-head competition at 2017 Shenzhen Game Fair

Threat Intelligence

Chinese Gamers Targeted in Winos4.0 Framework Scam Chinese Gamers Targeted in Winos4.0 Framework Scam

byDark Reading Staff

Nov 6, 2024

1 Min Read

Hands in shadow on a keyboard; dark blue tint

Vulnerabilities & Threats

How to Outsmart Stealthy E-Crime and Nation-State Threats How to Outsmart Stealthy E-Crime and Nation-State Threats

Nov 6, 2024

1 Min Read

Person in panda mask and colorful suit adjusting their tie

Application Security

Android Botnet 'ToxicPanda' Bashes Banks Across Europe, Latin America Android Botnet 'ToxicPanda' Bashes Banks Across Europe, LatAm

byBecky Bracken, Senior Editor, Dark Reading

Nov 5, 2024

1 Min Read

A human hand pointing to the letters API in the center of a blue backdrop with various technology icons around it

Сloud Security

Docusign API Abused in Widescale, Novel Invoice Attack Docusign API Abused in Widescale, Novel Invoice Attack

byElizabeth Montalbano, Contributing Writer

Nov 5, 2024

1 Min Read

human centered centric cybersecurity

Cybersecurity Operations

Oh, the Humanity! How to Make Humans Part of Cybersecurity Design

How to Make Humans Part of Cybersecurity Design

byRobert Lemos, Contributing Writer

The words "Zero Trust" in purple on two sides of a cube; blue, digital background

Vulnerabilities & Threats

How to Win at Cyber by Influencing People

How to Win at Cyber by Influencing People

byGregory R. Simpson

Dark Reading Confidential: Quantum Has Landed, So Now What?

Dark Reading Confidential: Quantum Has Landed, So Now What?

byDark Reading Staff

The word "vote" with red, white, and blue hands reaching up

Vulnerabilities & Threats

On Election Day, Disinformation Worries Security Pros the Most

On Election Day, Disinformation Worries Security Pros the Most

byTara Seals, Managing Editor, News, Dark Reading

Iran flag cyber APT

Vulnerabilities & Threats

Iranian APT Group Targets IP Cameras, Extends Attacks Beyond Israel

Iranian APT Group Targets IP Cameras, Extends Attacks Beyond Israel

byRobert Lemos, Contributing Writer

Vulnerabilities & Threats

Okta Fixes Auth Bypass Bug After 3-Month Lull

Okta Fixes Auth Bypass Bug After 3-Month Lull

byDark Reading Staff

A virtual computer screen above a keyboard

Vulnerabilities & Threats

OWASP Beefs Up GenAI Security Guidance Amid Growing Deepfakes

OWASP Beefs Up GenAI Security Guidance Amid Growing Deepfakes

byRobert Lemos, Contributing Writer

The letters LLM in 3D on top of the words Large Language Model against black backdrop

Application Security

Google: Big Sleep AI Agent Puts SQLite Software Bug to Bed

Google: Big Sleep AI Agent Puts SQLite Software Bug to Bed

byElizabeth Montalbano, Contributing Writer

Key with label "UPDATES" on keyboard

Vulnerabilities & Threats

Can Automatic Updates for Critical Infrastructure Be Trusted?

Can Automatic Updates for Critical Infrastructure Be Trusted?

byJohn Paul Cunningham

Application Security

Privacy Anxiety Pushes Microsoft Recall AI Release Again

Privacy Anxiety Pushes Microsoft Recall AI Release Again

byBecky Bracken, Senior Editor, Dark Reading

Creative API hologram on blurry background. Application Programming Interface concept.

Application Security

4 Main API Security Risks Organizations Need to Address

4 Main API Security Risks Organizations Need to Address

byJai Vijayan, Contributing Writer

Steel factory, blast furnaces at twilight

Vulnerabilities & Threats

Critical Auth Bugs Expose Smart Factory Gear to Cyberattack

Critical Auth Bugs Expose Smart Factory Gear to Cyberattack

byTara Seals, Managing Editor, News, Dark Reading

Red spy image on a die, coming between black silhouettes on multiple dice; yellow background

Vulnerabilities & Threats

IT Security Centralization Makes the Use of Industrial Spies More Profitable

IT Security Centralization Makes the Use of Industrial Spies More Profitable

byAybars Tuncdogan, Fulya Acikgoz

A little egret in a pond wanders too close to a pair of American Alligators sunning on the grassy verge.

Threat Intelligence

The Overlooked Importance of Identifying Riskiest Users

The Overlooked Importance of Identifying Riskiest Users

byGarrett Hamilton

Black computer keyboard with white letters with a red and white North Korea flag and a fingerprint on one key between the letters H and K

Endpoint Security

North Korea's Andariel Pivots to 'Play' Ransomware Games

North Korea's Andariel Pivots to 'Play' Ransomware Games

byElizabeth Montalbano, Contributing Writer

Vulnerabilities & Threats

The Case Against Abandoning CrowdStrike Post-Outage

The Case Against Abandoning CrowdStrike Post-Outage

byVishaal "V8" Hariprasad

Broken, rusty wrench

Vulnerabilities & Threats

When Cybersecurity Tools Backfire

When Cybersecurity Tools Backfire

byYvonne Dickinson

Puppies

Vulnerabilities & Threats

'CrossBarking' Attack Targeted Secret APIs, Exposing Opera Browser Users

'CrossBarking' Attack Targeted Secret APIs, Exposing Opera Browser Users

byNate Nelson, Contributing Writer

Password hash with salt crypt function concept 3d illustration

Vulnerabilities & Threats

Recurring Windows Flaw Could Expose User Credentials

Recurring Windows Flaw Could Expose User Credentials

byJai Vijayan, Contributing Writer

Close-up portrait of a Giant Panda eating bamboo leaves

Сloud Security

China's 'Evasive Panda' APT Debuts High-End Cloud Hijacking

China's 'Evasive Panda' APT Debuts High-End Cloud Hijacking

byTara Seals, Managing Editor, News, Dark Reading

Windows Update running on a laptop screen

Application Security

Windows 'Downdate' Attack Reverts Patched PCs to a Vulnerable State

Windows 'Downdate' Attack Reverts Patched PCs to a Vulnerable State

byJai Vijayan, Contributing Writer

Side view of Ukraine soldiers' shoulder patches

Threat Intelligence

Russia Kneecaps Ukraine Army Recruitment With Spoofed 'Civil Defense' App

Russia Kneecaps Ukraine Army Recruitment With Fake 'Civil Defense' App

byBecky Bracken, Senior Editor, Dark Reading

White hex code in front of a green light

Application Security

Mozilla: ChatGPT Can Be Manipulated Using Hex Code

Mozilla: ChatGPT Can Be Manipulated Using Hex Code

byNate Nelson, Contributing Writer

Zombie hand pushes up from the ground, surrounded by pumpkins

Vulnerabilities & Threats

Put End-of-Life Software to Rest

Put End-of-Life Software to Rest

A stylized chip design with the words Vulnhuntr across.

Application Security

Open Source LLM Tool Sniffs Out Python Zero-Days

Open Source LLM Tool Sniffs Out Python Bugs

byDark Reading Staff

Vulnerabilities & Threats

Grip Security Releases 2025 SaaS Security Risks Report

Grip Security Releases 2025 SaaS Security Risks Report

Close-up of stethoscope on black computer keyboard

Cyberattacks & Data Breaches

Microsoft: Healthcare Sees 300% Surge in Ransomware Attacks

Microsoft: Healthcare Sees 300% Surge in Ransomware Attacks

byDark Reading Staff

Vulnerabilities & Threats

Critical Bug Exploited in Fortinet's Management Console

Critical Bug Exploited in Fortinet's Management Console

byNate Nelson, Contributing Writer

Code magnified

Application Security

'Shift Left' Gets Pushback, Triggers Security Soul Searching

'Shift Left' Gets Pushback, Triggers Security Soul Searching

byRobert Lemos, Contributing Writer

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.