Cyberattacks & Data Breaches

Person holding smartphone with logo of company Zyxel Communications Corporation on screen in front of website

Endpoint Security

Unpatched Zyxel CPE Zero-Day Pummeled by Cyberattackers Unpatched Zyxel CPE Zero-Day Pummeled by Cyberattackers

VulnCheck initially disclosed the critical command-injection vulnerability (CVE-2024-40891) six months ago, but Zyxel has yet to mention its existence or offer users a patch to mitigate threats.

byKristina Beek, Associate Editor, Dark Reading

Jan 29, 2025

|

1 Min Read

A person with manicured nails sitting at a desk with a plant on it and holding a tablet device with the words "Warning DDoS" displayed on the screen

Endpoint Security

Mirai Variant ‘Aquabot’ Exploits Mitel Device Flaws Mirai Variant ‘Aquabot’ Exploits Mitel Device Flaws

byElizabeth Montalbano, Contributing Writer

Jan 29, 2025

1 Min Read

Captive Canada lynx (Lynx canadensis) licking nose on a log near Haines, Alaska

Threat Intelligence

Lynx Ransomware Group 'Industrializes' Cybercrime With Affiliates Lynx Ransomware Group 'Industrializes' Cybercrime With Affiliates

byKristina Beek, Associate Editor, Dark Reading

Jan 28, 2025

1 Min Read

A picture of the Amazon Prime website

Cyberattacks & Data Breaches

Phishing Campaign Baits Hook With Malicious Amazon PDFs Phishing Campaign Baits Hook With Malicious Amazon PDFs

byKristina Beek, Associate Editor, Dark Reading

Jan 28, 2025

1 Min Read

Digital world map in shades of blue

Reporting a Breach or Vuln? Be Sure Your Lawyer's on Call Reporting a Breach or Vuln? Be Sure Your Lawyer's on Call

byRobert Lemos, Contributing Writer

Jan 28, 2025

1 Min Read

An iPad, iPphone, Apple Watch, AirPods, and MacBook laid out on a black table

Endpoint Security

Apple Patches Actively Exploited Zero-Day Vulnerability Apple Patches Actively Exploited Zero-Day Vuln

byKristina Beek, Associate Editor, Dark Reading

Jan 27, 2025

1 Min Read

Two blue US Postal Service mailboxes

Endpoint Security

USPS Impersonators Tap Trust in PDFs in Smishing Attack Wave

USPS Impersonators Tap Trust in PDFs in Smishing Attacks

byElizabeth Montalbano, Contributing Writer

MITRE ATT&CK framework

Cybersecurity Operations

MITRE's Latest ATT&CK Simulations Tackle Cloud Defenses

MITRE's Latest ATT&CK Simulations Tackle Cloud Defenses

byRobert Lemos, Contributing Writer

Vulnerabilities & Threats

Cisco: Critical Meeting Management Bug Requires Urgent Patch

Cisco: Critical Meeting Management Bug Requires Urgent Patch

byKristina Beek, Associate Editor, Dark Reading

Cube with "AI" on the visible sides

Vulnerabilities & Threats

Strengthening Our National Security in the AI Era

Strengthening Our National Security in the AI Era

byMike Arrowsmith, Chief Trust Officer, NinjaOne

A magician's hand holding a wand, hovering above a bunny wearing a bowtie and sitting in a top hat

Endpoint Security

Black 'Magic' Targets Enterprise Juniper Routers With Backdoor

Black 'Magic' Targets Enterprise Juniper Routers With Backdoor

byNate Nelson, Contributing Writer

A series of figures in hoods washed in red against lines of code with several yellow stars on the upper left corner

Threat Intelligence

Chinese Cyberspies Target South Korean VPN in Supply Chain Attack

Chinese Cyberspies Target South Korean VPN in Supply Chain Attack

byElizabeth Montalbano, Contributing Writer

Microsoft Teams app on a mobile phone

Cyberattacks & Data Breaches

Email Bombing, 'Vishing' Tactics Abound in Microsoft 365 Attacks

Email Bombing, 'Vishing' Tactics Abound in Microsoft 365 Attacks

byKristina Beek, Associate Editor, Dark Reading

A hooded figure sitting in front of laptop

Cyberattacks & Data Breaches

DONOT Group Deploys Malicious Android Apps in India

DONOT Group Deploys Malicious Android Apps in India

byJai Vijayan, Contributing Writer

Threat Intelligence

HPE Investigates After Alleged Data Breach

HPE Investigates After Alleged Data Breach

byKristina Beek, Associate Editor, Dark Reading

The word DDoS inside a jagged circle with various other tech and security icons surrounding it with similar borders

Cyberattacks & Data Breaches

Mirai Botnet Spinoffs Unleash Global Wave of DDoS Attacks

Mirai Botnet Spinoffs Unleash Global Wave of DDoS Attacks

byElizabeth Montalbano, Contributing Writer

Endpoint Security

15K Fortinet Device Configs Leaked to the Dark Web

15K Fortinet Device Configs Leaked to the Dark Web

byNate Nelson, Contributing Writer

A US money bill depicting the Treasury building

Threat Intelligence

US Sanctions Chinese Hacker & Firm for Treasury, Critical Infrastructure Breaches

US Sanctions Chinese Hacker for Treasury, Infrastructure Breaches

byKristina Beek, Associate Editor, Dark Reading

The Kazakh and Russian flags

Cyberattacks & Data Breaches

Russian APT Phishes Kazakh Gov't for Strategic Intel

Russian APT Phishes Kazakh Gov't for Strategic Intel

byNate Nelson, Contributing Writer

Cyberattacks & Data Breaches

183M Patient Records Exposed: Fortified Health Security Releases 2025 Healthcare Cybersecurity Report

183M Patient Records Exposed: Fortified Health Security Releases 2025 Healthcare Cybersecurity Report

Vulnerabilities & Threats

Strategic Approaches to Threat Detection, Investigation & Response

Strategic Approaches to Threat Detection, Investigation & Response

bySameer Bhanushali, Lead Engineer/IAM Architect, Paramount Global

A series of binary code in orange and blue colors

Vulnerabilities & Threats

CISA: Second BeyondTrust Vulnerability Added to KEV Catalog

CISA: Second BeyondTrust Vulnerability Added to KEV Catalog

byKristina Beek, Associate Editor, Dark Reading

The North Korean flag on the key of a computer keyboard with a fingerprint on it in between the H and K keys

Threat Intelligence

North Korea's Lazarus APT Evolves Developer-Recruitment Attacks

North Korea's Lazarus Evolves Developer-Recruitment Attacks

byElizabeth Montalbano, Contributing Writer

Sections of the Taiwan, China, and US flags, with cracks

As Tensions Mount With China, Taiwan Sees Surge in Cyberattacks

As Tensions Mount With China, Taiwan Sees Surge in Cyberattacks

byRobert Lemos, Contributing Writer

The Chinese flag on a laptop screen that is partially closed

Cybersecurity Operations

FBI Wraps Up Eradication Effort of Chinese 'PlugX' Malware

FBI Wraps Up Eradication Effort of Chinese 'PlugX' Malware

byKristina Beek, Associate Editor, Dark Reading

A white device with the word Fortinet written on it against a red background

Threat Intelligence

Zero-Day Security Bug Likely Fueling Fortinet Firewall Attacks

Zero-Day Bug Likely Fueling Fortinet Firewall Attacks

byElizabeth Montalbano, Contributing Writer

Application Security

Microsoft Cracks Down on Malicious Copilot AI Use

Microsoft Cracks Down on Malicious Copilot AI Use

byKristina Beek, Associate Editor, Dark Reading

Amelia Earhart in her Lockheed L-10E Electra preparing for 27,000 mile globe flight in 1937

Сloud Security

Cloud Attackers Exploit Max-Critical Aviatrix RCE Flaw

Cloud Attackers Exploit Max-Critical Aviatrix RCE Flaw

byJai Vijayan, Contributing Writer

A person in a hooded sweatshirt holding a tablet device with the word "infostealer" appearing around them in red and blue

Threat Intelligence

Cyberattackers Hide Infostealers in YouTube Comments, Google Search Results

Cyberattackers Hide Infostealers in YouTube Comments

byElizabeth Montalbano, Contributing Writer

Cyberattacks & Data Breaches

Telefonica Breach Exposes Jira Tickets, Customer Data

Telefonica Breach Exposes Jira Tickets, Customer Data

byKristina Beek, Associate Editor, Dark Reading

A dictionary listing for "deja vu"

Vulnerabilities & Threats

Threat Actors Exploit a Critical Ivanti RCE Bug, Again

Threat Actors Exploit a Critical Ivanti RCE Bug, Again

byNate Nelson, Contributing Writer

Threat Intelligence

Fake CrowdStrike 'Job Interviews' Become Latest Hacker Tactic

Fake CrowdStrike 'Job Interviews' Become Latest Hacker Tactic

byKristina Beek, Associate Editor, Dark Reading

The Japanese flag overlaid with binary code

Cyberattacks & Data Breaches

Chinese APT Group Is Ransacking Japan's Secrets

Chinese APT Group Is Ransacking Japan's Secrets

byBecky Bracken, Senior Editor, Dark Reading

A banshee haunting a man, from a 19th century lithograph

Threat Intelligence

Banshee 2.0 Malware Steals Apple's Encryption to Hide on Macs

Banshee 2.0 Malware Steals Apple's Encryption to Hide on Macs

byNate Nelson, Contributing Writer

Satellite view of a typhoon in the Philippines

Cyberattacks & Data Breaches

Hacking Group 'Silk Typhoon' Linked to US Treasury Breach

Hacking Group 'Silk Typhoon' Linked to US Treasury Breach

byKristina Beek, Associate Editor, Dark Reading

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.