Perimeter

Breaking news, news analysis, and expert commentary on threats to the network perimeter, and the tools & technologies for securing it.

A white device with the word Fortinet written on it against a red background

Threat Intelligence

Zero-Day Security Bug Likely Fueling Fortinet Firewall Attacks Zero-Day Bug Likely Fueling Fortinet Firewall Attacks

An ongoing campaign targeting FortiGate devices with management interfaces exposed on the public Internet is leading to unauthorized administrative logins and configuration changes, creating new accounts, and performing SSL VPN authentication.

byElizabeth Montalbano, Contributing Writer

Jan 14, 2025

|

1 Min Read

network globe DNS DNSSEC

Сloud Security

DNSSEC Denial-of-Service Attacks Show Technology's Fragility DNSSEC Denial-of-Service Attacks Show Technology's Fragility

byRobert Lemos, Contributing Writer

Dec 24, 2024

1 Min Read

A still from the 2013 Hollywood movie "Pacific Rim"

Threat Intelligence

Chinese APTs Cash In on Years of Edge Device Attacks Chinese APTs Cash In on Years of Edge Device Attacks

byNate Nelson, Contributing Writer

Nov 1, 2024

1 Min Read

Fortinet's logo on the face of a building

Vulnerabilities & Threats

Critical Bug Exploited in Fortinet's Management Console Critical Bug Exploited in Fortinet's Management Console

byNate Nelson, Contributing Writer

Oct 24, 2024

1 Min Read

A person standing on top of a cliff with a bungee rope and another person ready to push.

Remote Workforce

Name That Toon: The Big Jump Name That Toon: The Big Jump

byJohn Klossner

Oct 22, 2024

1 Min Read

A sankey diagram showing majority of user accounts do not have multifactor authentication.

Identity & Access Management Security

Even Orgs With SSO Are Vulnerable to Identity-Based Attacks Even Orgs With SSO Are Vulnerable to Identity-Based Attacks

Oct 15, 2024

1 Min Read

ICS/OT Security

NSA Releases 6 Principles of OT Cybersecurity

NSA Releases 6 Principles of OT Cybersecurity

byJennifer Lawinski, Contributing Writer

Icons showing different types of operational technology

Endpoint Security

Dragos Expands ICS Platform With New Acquisition

Dragos Expands ICS Platform With New Acquisition

byJeffrey Schwartz, Contributing Writer

Icons and fingerprints suggesting various authentication schemes on top of a laptop keyboard.

Identity & Access Management Security

Startup Finds 'Hydden' Identities in IT Environment

Startup Finds 'Hydden' Identities in IT Environment

byFahmida Y. Rashid, Managing Editor, Features

The flags of Israel and Russia

Threat Intelligence

Ukraine, Gaza Wars Inspire DDoS Surge Against Finservs

Ukraine, Gaza Wars Inspire DDoS Surge Against Finservs

byNate Nelson, Contributing Writer

A city skyline at night with a network mesh overlay

Cybersecurity Operations

UnDisruptable27 Project Wants to Shore Up Critical Infrastructure Security

UnDisruptable27 Tackles Critical Infrastructure Defense

byJennifer Lawinski, Contributing Writer

A lock with the Russian flag imprinted on it sitting atop a computer keyboard

Endpoint Security

Security End-Run: 'AuKill' Shuts Down Windows-Reliant EDR Processes

Security End-Run: 'AuKill' Shuts Down Windows-Reliant EDR Processes

byNate Nelson, Contributing Writer

Identity & Access Management Security

BlueVoyant Unveils Edge Security Operations Platform

BlueVoyant Unveils Edge Security Operations Platform

Cybersecurity Operations

DNSFilter Welcomes Cisco Veteran TK Keanini As CTO

DNSFilter Welcomes Cisco Veteran TK Keanini As CTO

A woman typing on a keyboard in the background and digital spheres connected to one another in the foreground. The middle one says VPN

Threat Intelligence

Attackers Target Check Point VPNs to Access Corporate Networks

Attackers Target Check Point VPNs to Access Corporate Networks

byNate Nelson, Contributing Writer

Signage from RSAC conference

Cybersecurity Operations

Is CISA's Secure by Design Pledge Toothless?

Is CISA's Secure by Design Pledge Toothless?

byNate Nelson, Contributing Writer

Application Security

2 (or 5) Bugs in F5 Asset Manager Allow Full Takeover, Hidden Accounts

2 (or 5) Bugs in F5 Asset Manager Allow Full Takeover, Hidden Accounts

byNate Nelson, Contributing Writer

Сloud Security

Chinese Hackers Deployed Backdoor Quintet to Down MITRE

Chinese Hackers Deployed Backdoor Quintet to Down MITRE

byNate Nelson, Contributing Writer

Cybersecurity Operations

Palo Alto Networks Delivers Comprehensive SASE Capabilities

Palo Alto Networks Delivers Comprehensive SASE Capabilities

Nuclear plant in a desert

ICS/OT Security

To Damage OT Systems, Hackers Tap USBs, Old Bugs & Malware

To Damage OT Systems, Hackers Tap USBs, Old Bugs & Malware

byNate Nelson, Contributing Writer

White computer keyboard with "zero-day exploit" spelled outon keys and gloved fingers typing

Endpoint Security

Cisco Zero-Days Anchor 'ArcaneDoor' Cyber-Espionage Campaign

Cisco Zero-Days Anchor 'ArcaneDoor' Cyber-Espionage Campaign

byElizabeth Montalbano, Contributing Writer

VPN other edge devices cybersecurity

Endpoint Security

Teetering on the Edge: VPNs, Firewalls' Nonexistent Telemetry Lures APTs

On the Edge: VPNs, Firewalls' Nonexistent Telemetry Lures APTs

byRobert Lemos, Contributing Writer

The letters EDR/XDR amid binary code

Application Security

Evil XDR: Researcher Turns Palo Alto Software Into Perfect Malware

Evil XDR: Researcher Turns Palo Alto Software Into Perfect Malware

byNate Nelson, Contributing Writer

a white keyboard with a key marked, "Securing DNS"

Remote Workforce

New Tool Shields Organizations From NXDOMAIN Attacks

New Tool Shields Organizations From NXDOMAIN Attacks

byDavid Strom, Contributing Writer

Man running with a bunch of 1s and 0s held above his head, across a field of 1s and 0s

Cybersecurity Operations

NSA Updates Zero-Trust Advice to Reduce Attack Surfaces

NSA Updates Zero-Trust Advice to Reduce Attack Surfaces

byDark Reading Staff, Dark Reading

Tips for Securing the Software Supply Chain

Tips for Securing the Software Supply Chain

byGeorge V. Hulme, Contributing Writer

Abu Dhabi skyline

United Arab Emirates Faces Intensified Cyber-Risk

United Arab Emirates Faces Intensified Cyber-Risk

byRobert Lemos, Contributing Writer

zero trust networks

Cybersecurity Operations

6 CISO Takeaways From the NSA's Zero-Trust Guidance

6 CISO Takeaways From the NSA's Zero-Trust Guidance

byRobert Lemos, Contributing Writer

Poison ivy leaves

Identity & Access Management Security

Redesigning the Network to Fend Off Living-Off-the-Land Tactics

Redesigning the Network to Fend Off Living-Off-the-Land Tactics

byNathan Eddy, Contributing Writer

A survey asking is stress good or bad

Сloud Security

Ivanti Gets Poor Marks for Cyber Incident Response

Ivanti Gets Poor Marks for Cyber Incident Response

byBecky Bracken, Senior Editor, Dark Reading

Canon printer printing a piece of paper out

Endpoint Security

Critical Bugs in Canon Small Office Printers Allow Code Execution, DDoS

Critical Bugs in Canon Small Office Printers Allow Code Execution, DDoS

byNate Nelson, Contributing Writer

Krusty Burger is a fast-food burger restaurant chain that was founded by Krusty the clown in Springfield

Endpoint Security

Ivanti Zero-Day Patches Delayed as 'KrustyLoader' Attacks Mount

Ivanti Zero-Day Patches Delayed as 'KrustyLoader' Attacks Mount

byTara Seals, Managing Editor, News, Dark Reading

Aerial view of Hong Kong International Airport and the harbor and mountain beyond

Сloud Security

Airline Gets SASE to Modernize Operations

Airline Gets SASE to Modernize Operations

byKaren D. Schwartz, Contributing Writer, Contributing Writer

Cybersecurity Operations

Netskope Announces MSP-Friendly, Enterprise-Grade SASE Tailored for the Midmarket

Netskope Announces MSP-Friendly, Enterprise-Grade SASE Tailored for the Midmarket

A person in a hooded sweatshirt holding a tablet device

Vulnerabilities & Threats

178K+ SonicWall Firewalls Vulnerable to DoS, RCE Attacks

178K+ SonicWall Firewalls Vulnerable to DoS, RCE Attacks

byElizabeth Montalbano, Contributing Writer

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.