News

Concept illustration of a content delivery network on a world map

Application Security

Misconfigured WAFs Heighten DoS, Breach Risks Misconfigured WAFs Heighten DoS, Breach Risks

Organizations that rely on their content delivery network provider for Web application firewall services may be inadvertently leaving themselves open to attack.

byJai Vijayan, Contributing Writer

Dec 3, 2024

|

4 Min Read

Words "accelerating growth" appear in white text on blue background of wave-like designs, accompanied by the Informa TechTarget logo and company name.

Cybersecurity Operations

Note From the Editor-in-Chief Note From the Editor-in-Chief

byKelly Jackson Higgins, Editor-in-Chief, Dark Reading

Dec 3, 2024

1 Min Read

Cisco logo sign outside of a building

Vulnerabilities & Threats

Decade-Old Cisco Vulnerability Under Active Exploit Decade-Old Cisco Vulnerability Under Active Exploit

byKristina Beek, Associate Editor, Dark Reading

Dec 3, 2024

1 Min Read

Group of co-workers talking together while sitting in a circle in an office

Vulnerabilities & Threats

Cyber-Unsafe Employees Increasingly Put Orgs at Risk Cyber-Unsafe Employees Increasingly Put Orgs at Risk

byKristina Beek, Associate Editor, Dark Reading

Dec 3, 2024

1 Min Read

Gold and black spider sitting on a web

Cyberattacks & Data Breaches

Venom Spider Spins Web of New Malware for MaaS Platform Venom Spider Spins Web of Malware for MaaS Platform

byElizabeth Montalbano, Contributing Writer

Dec 3, 2024

3 Min Read

A gray wolf standing in the snow

'White FAANG' Data Export Attack: A Gold Mine for PII Threats 'White FAANG' Data Export Attack: A Gold Mine for PII Threats

byNate Nelson, Contributing Writer

Dec 3, 2024

4 Min Read

A circuit chip with an image of a bug on it

'Bootkitty' First Bootloader to Take Aim at Linux

'Bootkitty' First Bootloader to Take Aim at Linux

byJai Vijayan, Contributing Writer

Cybersecurity Operations

Interpol Cyber-Fraud Action Nets More Than 5K Arrests

Interpol Cyber-Fraud Action Nets More Than 5K Arrests

byDark Reading Staff, Dark Reading

a person in a suit looking at a screen of indicators and icons showing threats and networks

Threat Intelligence

AWS Launches New Incident Response Service

AWS Launches New Incident Response Service

byDark Reading Staff, Dark Reading

A stethoscope on a computer keyboard

Cyberattacks & Data Breaches

2 UK Hospitals Targeted in Separate Cyberattacks

2 UK Hospitals Targeted in Separate Cyberattacks

byDark Reading Staff, Dark Reading

Endpoint Security

Microsoft Boosts Device Security With Windows Resiliency Initiative

Microsoft Boosts Device Security With Windows Resiliency Initiative

byJeffrey Schwartz, Contributing Writer

Two hands typing on a laptop's keyboard, with a digital overlay

Threat Intelligence

Ransomware Gangs Seek Pen Testers to Boost Quality

Ransomware Gangs Seek Pen Testers to Boost Quality

byRobert Lemos, Contributing Writer

The Russian flag covered by code on a laptop screen

Cybersecurity Operations

'Operation Undercut' Adds to Russia Malign Influence Campaigns

'Operation Undercut' Adds to Russia Malign Influence Campaigns

byJai Vijayan, Contributing Writer

A blue credit card on a fish hook being dangled above a computer keyboard

Application Security

Sneaky Skimmer Malware Targets Magento Sites Ahead of Black Friday

Sneaky Skimmer Malware Targets Magento Sites Ahead of Black Friday

byElizabeth Montalbano, Contributing Writer

Vector green digital code rain in a Matrix inspired futuristic style

Cyberattacks & Data Breaches

Russian Script Kiddie Assembles Massive DDoS Botnet

Russian Script Kiddie Assembles Massive DDoS Botnet

byJai Vijayan, Contributing Writer

Endpoint Security

Microsoft Finally Releases Recall as Part of Windows Insider Preview

Microsoft Previews Recall in Windows Insider

Hands holing and working a tablet, overlaid with charts

Application Security

Israel Defies VC Downturn With More Cybersecurity Investments

Israel Defies VC Downturn With More Cybersecurity Investments

byRobert Lemos, Contributing Writer

A still from the famous orgasm scene in "When Harry Met Sally"

Application Security

'RomCom' APT Mounts Zero-Day, Zero-Click Browser Escapes in Firefox, Tor

'RomCom' APT Mounts Zero-Day, Zero-Click Browser Escapes

byNate Nelson, Contributing Writer

Woman holding a red penalty card

Cybersecurity Operations

Geico, Travelers Fined $11.3M for Lax Data Security

Geico, Travelers Fined $11.3M for Lax Data Security

byDark Reading Staff, Dark Reading

Hooded figures on the Chinese flag cover with code

Application Security

Salt Typhoon Builds Out Malware Arsenal With GhostSpider

Salt Typhoon Builds Out Malware Arsenal With GhostSpider

byNate Nelson, Contributing Writer

Identity & Access Management Security

AWS Rolls Out Updates to Amazon Cognito

AWS Rolls Out Updates to Amazon Cognito

byJennifer Lawinski, Contributing Writer

Images of nonfungible tokens clustered together on a screen with an index finger hovering above as if to press on one

Application Security

OpenSea Phishers Aim to Drain Crypto Wallets of NFT Enthusiasts

OpenSea NFT Phishers Aim to Drain Crypto Wallets

byElizabeth Montalbano, Contributing Writer

Cyberattacks & Data Breaches

Ransomware Attack on Blue Yonder Hits Starbucks, Supermarkets

Ransomware Attack on Blue Yonder Hits Starbucks, Supermarkets

byJai Vijayan, Contributing Writer

Ransomware crime scene tape

Vulnerabilities & Threats

BlackBasta Ransomware Brand Picks Up Where Conti Left Off

BlackBasta Ransomware Brand Picks Up Where Conti Left Off

byBecky Bracken, Senior Editor, Dark Reading

Open laptop computer overwashed in red with a yellow sickle and computer code on the screen

Cyberattacks & Data Breaches

Fancy Bear 'Nearest Neighbor' Attack Uses Nearby Wi-Fi Network

Fancy Bear 'Nearest Neighbor' Attack Uses Nearby Wi-Fi Network

byElizabeth Montalbano, Contributing Writer

The app logos for ChatGPT and Claude

Application Security

Faux ChatGPT, Claude API Packages Deliver JarkaStealer

Faux ChatGPT, Claude API Packages Deliver JarkaStealer

byNate Nelson, Contributing Writer

A scattered group of magazines about Japan's underworld

Cyberattacks & Data Breaches

Yakuza Victim Data Leaked in Japanese Agency Attack

Yakuza Victim Data Leaked in Japanese Agency Attack

byDark Reading Staff, Dark Reading

Water treatment plant viewed from above

Vulnerabilities & Threats

Leaky Cybersecurity Holes Put Water Systems at Risk

Leaky Cybersecurity Holes Put Water Systems at Risk

byRobert Lemos, Contributing Writer

Outlines of two figures facing each other, one with the US flag and one with the Chinese flagged superimposed; the figures have circuits for heads

China's Cyber Offensives Built in Lockstep With Private Firms, Academia

China's Cyber Offensives Built in Lockstep With Private Firms, Academia

byJai Vijayan, Contributing Writer

Digital magnifying glass

Сloud Security

Microsoft Highlights Security Exposure Management at Ignite

Microsoft Highlights Security Exposure Management at Ignite

byJeffrey Schwartz, Contributing Writer

puzzle pieces with combination lock to represent secure coding practices

Application Security

MITRE: Cross-Site Scripting Is 2024's Most Dangerous Software Weakness

MITRE: Cross-Site Scripting Is 2024's Most Dangerous Software Weakness

byBecky Bracken, Senior Editor, Dark Reading

Cybersecurity Operations

Microsoft Takes Action Against Phishing-as-a-Service Platform

Microsoft Takes Action Against Phishing-as-a-Service Platform

byDark Reading Staff, Dark Reading

cloud with padlocks

Сloud Security

Cloud Security Startup Wiz to Acquire Dazz in Risk Management Play

Cloud Security Startup Wiz to Acquire Dazz

byJennifer Lawinski, Contributing Writer

Yellow wolfsbane flowers with mountains in background

Threat Intelligence

Chinese APT Gelsemium Deploys 'Wolfsbane' Linux Variant

Chinese APT Gelsemium Deploys 'Wolfsbane' Linux Variant

byNate Nelson, Contributing Writer

A gavel sitting on a judge's desk in a court room

Cybersecurity Operations

Scattered Spider Cybercrime Members Face Prison Time

Scattered Spider Cybercrime Members Face Prison Time

byDark Reading Staff, Dark Reading

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.