News

A shoe polish kit

Vulnerabilities & Threats

Trusted Apps Sneak a Bug Into the UEFI Boot Process Trusted Apps Sneak a Bug Into the UEFI Boot Process

Seven system recovery programs contained what amounted to a backdoor for injecting any untrusted file into the system startup process.

byNate Nelson, Contributing Writer

Jan 16, 2025

|

4 Min Read

Google Ads logo on a smartphone screen

Vulnerabilities & Threats

Attackers Hijack Google Advertiser Accounts to Spread Malware Attackers Hijack Google Advertiser Accounts to Spread Malware

byJai Vijayan, Contributing Writer

Jan 15, 2025

4 Min Read

A series of binary code in orange and blue colors

Vulnerabilities & Threats

CISA: Second BeyondTrust Vulnerability Added to KEV Catalog CISA: Second BeyondTrust Vulnerability Added to KEV Catalog

byKristina Beek, Associate Editor, Dark Reading

Jan 15, 2025

1 Min Read

The North Korean flag on the key of a computer keyboard with a fingerprint on it in between the H and K keys

Threat Intelligence

North Korea's Lazarus APT Evolves Developer-Recruitment Attacks North Korea's Lazarus Evolves Developer-Recruitment Attacks

byElizabeth Montalbano, Contributing Writer

Jan 15, 2025

4 Min Read

Sections of the Taiwan, China, and US flags, with cracks

As Tensions Mount With China, Taiwan Sees Surge in Cyberattacks As Tensions Mount With China, Taiwan Sees Surge in Cyberattacks

byRobert Lemos, Contributing Writer

Jan 15, 2025

4 Min Read

Closed padlock on digital background

Application Security

Microsoft Rings in 2025 With Record Security Update Microsoft Rings in 2025 With Record Security Update

byJai Vijayan, Contributing Writer

Jan 14, 2025

4 Min Read

An apple tree with roots growing underground

Vulnerabilities & Threats

Apple Bug Allows Root Protections Bypass Without Physical Access

Apple Bug Allows Root Protections Bypass Without Physical Access

byBecky Bracken, Senior Editor, Dark Reading

The Chinese flag on a laptop screen that is partially closed

Cybersecurity Operations

FBI Wraps Up Eradication Effort of Chinese 'PlugX' Malware

FBI Wraps Up Eradication Effort of Chinese 'PlugX' Malware

byKristina Beek, Associate Editor, Dark Reading

A white device with the word Fortinet written on it against a red background

Threat Intelligence

Zero-Day Security Bug Likely Fueling Fortinet Firewall Attacks

Zero-Day Bug Likely Fueling Fortinet Firewall Attacks

byElizabeth Montalbano, Contributing Writer

Application Security

Microsoft Cracks Down on Malicious Copilot AI Use

Microsoft Cracks Down on Malicious Copilot AI Use

byKristina Beek, Associate Editor, Dark Reading

Amelia Earhart in her Lockheed L-10E Electra preparing for 27,000 mile globe flight in 1937

Сloud Security

Cloud Attackers Exploit Max-Critical Aviatrix RCE Flaw

Cloud Attackers Exploit Max-Critical Aviatrix RCE Flaw

byJai Vijayan, Contributing Writer

A person in a hooded sweatshirt holding a tablet device with the word "infostealer" appearing around them in red and blue

Threat Intelligence

Cyberattackers Hide Infostealers in YouTube Comments, Google Search Results

Cyberattackers Hide Infostealers in YouTube Comments

byElizabeth Montalbano, Contributing Writer

Cyberattacks & Data Breaches

Telefonica Breach Exposes Jira Tickets, Customer Data

Telefonica Breach Exposes Jira Tickets, Customer Data

byKristina Beek, Associate Editor, Dark Reading

A dictionary listing for "deja vu"

Vulnerabilities & Threats

Threat Actors Exploit a Critical Ivanti RCE Bug, Again

Threat Actors Exploit a Critical Ivanti RCE Bug, Again

byNate Nelson, Contributing Writer

Threat Intelligence

Fake CrowdStrike 'Job Interviews' Become Latest Hacker Tactic

Fake CrowdStrike 'Job Interviews' Become Latest Hacker Tactic

byKristina Beek, Associate Editor, Dark Reading

A digital map of Russia

Threat Intelligence

Russia Carves Out Commercial Surveillance Success Globally

Russia Carves Out Commercial Surveillance Success Globally

byRobert Lemos, Contributing Writer

The Japanese flag overlaid with binary code

Cyberattacks & Data Breaches

Chinese APT Group Is Ransacking Japan's Secrets

Chinese APT Group Is Ransacking Japan's Secrets

byBecky Bracken, Senior Editor, Dark Reading

A banshee haunting a man, from a 19th century lithograph

Threat Intelligence

Banshee 2.0 Malware Steals Apple's Encryption to Hide on Macs

Banshee 2.0 Malware Steals Apple's Encryption to Hide on Macs

byNate Nelson, Contributing Writer

Satellite view of a typhoon in the Philippines

Cyberattacks & Data Breaches

Hacking Group 'Silk Typhoon' Linked to US Treasury Breach

Hacking Group 'Silk Typhoon' Linked to US Treasury Breach

byKristina Beek, Associate Editor, Dark Reading

The flag of India overlaid on top of computer servers

Cybersecurity Operations

India Readies Overhauled National Data Privacy Rules

India Readies Overhauled National Data Privacy Rules

byNate Nelson, Contributing Writer

The White House

Cybersecurity Operations

Fed 'Cyber Trust' Label: Good Intentions That Fall Short

Fed 'Cyber Trust' Label: Good Intentions That Fall Short

byKristina Beek, Associate Editor, Dark Reading

Green Bay Packers' fans cheer during a game against the Indianapolis Colts in Green Bay, Wisconsin

Cyberattacks & Data Breaches

Green Bay Packers' Online Pro Shop Sacked by Payment Skimmer

Green Bay Packers' Online Pro Shop Sacked by Payment Skimmer

byTara Seals, Managing Editor, News, Dark Reading

PayPal website page open on a computer screen displaying how people can send money using the service

Threat Intelligence

Unconventional Cyberattacks Aim to Take Over PayPal Accounts

Unconventional Cyberattacks Aim to Take Over PayPal Accounts

byElizabeth Montalbano, Contributing Writer

A blue digital map of Africa

Cyberattacks & Data Breaches

Ransomware Targeting Infrastructure Hits Telecom Namibia

Ransomware Targeting Infrastructure Hits Telecom Namibia

byRobert Lemos, Contributing Writer

shadow of three fingers on keyboard

Identity & Access Management Security

1Password Acquires SaaS Access Management Provider Trelica

1Password Acquires SaaS Access Management Provider Trelica

byJeffrey Schwartz, Contributing Writer

Mobile device in pocket with Telegram app displayed

Cybersecurity Operations

Sharing of Telegram User Data Surges After CEO Arrest

Sharing of Telegram User Data Surges After CEO Arrest

byBecky Bracken, Senior Editor, Dark Reading

Tencent's website homepage

Cybersecurity Operations

Pentagon Adds Chinese Gaming Giant Tencent to Federal Ban

Pentagon Adds Chinese Gaming Giant Tencent to Federal Ban

byKristina Beek, Associate Editor, Dark Reading

Close up of the US Treasury Building on the back of the US $10 bill

Cyberattacks & Data Breaches

CISA: Third-Party Data Breach Limited to Treasury Dept.

CISA: Third-Party Data Breach Limited to Treasury Dept.

byKristina Beek, Associate Editor, Dark Reading

Threat Intelligence

PhishWP Plug-in Hijacks WordPress E-Commerce Checkouts

PhishWP Plug-in Hijacks WordPress E-Commerce Checkouts

byElizabeth Montalbano, Contributing Writer

a sign with the words 'open source' written in blue

Application Security

Veracode Buys Package Analysis Technology From Phylum

Veracode Buys Package Analysis Technology From Phylum

byFahmida Y. Rashid, Managing Editor, Features

Amit Yoran in a dark sweater standing in front of a window

Сloud Security

In Appreciation: Amit Yoran, Tenable CEO, Passes Away

In Appreciation: Amit Yoran, Tenable CEO, Passes Away

byDark Reading Staff, Dark Reading

The Chinese flag on a hardware chip

Cyberattacks & Data Breaches

China's Salt Typhoon Adds Charter, Windstream to Telecom Victim List

China's Salt Typhoon Adds Charter, Windstream to Telecom Victim List

byKristina Beek, Associate Editor, Dark Reading

A camera lens on red background

Cyberattacks & Data Breaches

FireScam Android Spyware Campaign Poses 'Significant Threat Worldwide'

Android Spyware Campaign Poses 'Significant Threat Worldwide'

byBecky Bracken, Senior Editor, Dark Reading

Yellow and black bee on a pink flower

Cyberattacks & Data Breaches

EagerBee Backdoor Takes Flight Against Mideast ISPs, Government Targets

EagerBee Backdoor Takes Flight Against Mideast Targets

byElizabeth Montalbano, Contributing Writer

Sharks circling a computer

Threat Intelligence

Thousands of BeyondTrust Systems Remain Exposed

Thousands of BeyondTrust Systems Remain Exposed

byBecky Bracken, Senior Editor, Dark Reading

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.