Vulnerabilities & Threats

More Topics

Insider Threats

software developer Semgrep Opengrep

Application Security

Code-Scanning Tool's License at Heart of Security Breakup Code-Scanning Tool's License at Heart of Security Breakup

Nine application security toolmakers band together to fork the popular Semgrep code-scanning project, touching off a controversy over access to features and fairness.

byRobert Lemos, Contributing Writer

Jan 31, 2025

|

1 Min Read

Close-up of a compass face; north is marked TRUST, and the needle is pointe toward it

Endpoint Security

Can AI & the Cyber Trust Mark Rebuild Endpoint Confidence?Can AI & the Cyber Trust Mark Rebuild Endpoint Confidence?

byChris "CT" Thomas

Jan 31, 2025

1 Min Read

GitHub Copilot's logo on an iPhone screen, laying on a keyboard

Vulnerabilities & Threats

New Jailbreaks Allow Users to Manipulate GitHub Copilot New Jailbreaks Allow Users to Manipulate GitHub Copilot

byNate Nelson, Contributing Writer

Jan 30, 2025

1 Min Read

Person holing a tablet; above the tablet, the words "PENETRATION TEST"

Vulnerabilities & Threats

Automated Pen Testing Is Improving — Slowly Automated Pen Testing Is Improving — Slowly

Jan 30, 2025

1 Min Read

Namibia's former first lady, Monica Geingos

Threat Intelligence

Fake Videos of Former First Lady Scam Namibians Fake Videos of Former First Lady Scam Namibians

byNate Nelson, Contributing Writer

Jan 30, 2025

1 Min Read

Illustration depicting PrintNightmare Vulnerability

Endpoint Security

PrintNightmare Aftermath: Windows Print Spooler Is Better. What's Next?PrintNightmare Aftermath: Windows Print Spooler Is Better. What's Next?

byJai Vijayan, Contributing Writer

Jan 29, 2025

1 Min Read

Tablet screen in front of shadowy North Korean flag and hooded figure

Cyberattacks & Data Breaches

Researchers Uncover Lazarus Group Admin Layer for C2 Servers

Researchers Uncover Lazarus Group Admin Layer for C2 Servers

byJai Vijayan, Contributing Writer

Endpoint Security

Unpatched Zyxel CPE Zero-Day Pummeled by Cyberattackers

Unpatched Zyxel CPE Zero-Day Pummeled by Cyberattackers

byKristina Beek, Associate Editor, Dark Reading

A person with manicured nails sitting at a desk with a plant on it and holding a tablet device with the words "Warning DDoS" displayed on the screen

Endpoint Security

Mirai Variant 'Aquabot' Exploits Mitel Device Flaws

Mirai Variant 'Aquabot' Exploits Mitel Device Flaws

byElizabeth Montalbano, Contributing Writer

The words "risk management" printed on two gears

Vulnerabilities & Threats

The Old Ways of Vendor Risk Management Are No Longer Good Enough

Old Ways of Vendor Risk Management Are No Longer Good Enough

byJatin Mannepalli, Information Security Officer, IMC Trading

A silhouette of one person in red in rows of other people, with a flashlight shining on that person.

Insider Threats

CrowdStrike Highlights Magnitude of Insider Risk

CrowdStrike Highlights Magnitude of Insider Risk

byJeffrey Schwartz, Contributing Writer

An Oauth concept image with people sitting on and walking around the word Oauth

Application Security

OAuth Flaw Exposed Millions of Airline Users to Account Takeovers

OAuth Flaw Exposed Millions of Airline Users to Account Takeovers

byJai Vijayan, Contributing Writer

A picture of the Amazon Prime website

Cyberattacks & Data Breaches

Phishing Campaign Baits Hook With Malicious Amazon PDFs

Phishing Campaign Baits Hook With Malicious Amazon PDFs

byKristina Beek, Associate Editor, Dark Reading

Toy football helmets of the Kansas City Chiefs and Philadelphia Eagles, on a gridiron

Endpoint Security

Super Bowl LIX Could Be a Magnet for Cyberattacks

Super Bowl LIX Could Be a Magnet for Cyberattacks

byJai Vijayan, Contributing Writer

Data Privacy Day 2025: Time for Data Destruction to Become Standard Business Practice

Data Privacy Day 2025: Time for Data Destruction

byAdam Strange, Principal Analyst, Data Security, Omdia

Digital world map in shades of blue

Reporting a Breach or Vuln? Be Sure Your Lawyer's on Call

Reporting a Breach or Vuln? Be Sure Your Lawyer's on Call

byRobert Lemos, Contributing Writer

Jigsaw puzzle with black background; the pieces have combination locks on them

Vulnerabilities & Threats

Cryptographic Agility's Legislative Possibilities & Business Benefits

Cryptographic Agility's Legislative Possibilities & Benefits

byKeavy Murphy, Cybersecurity Specialist

White network appliance with the word Fortinet on it against red background

Сloud Security

Actively Exploited Fortinet Zero-Day Gives Attackers Super-Admin Privileges

Fortinet Zero-Day Gives Attackers Super-Admin Privileges

byElizabeth Montalbano, Contributing Writer

Person types on a laptop keyboard; a robot labeled "Ai" floats above the keyboard

Сloud Security

For $50, Cyberattackers Can Use GhostGPT to Write Malicious Code

For $50, Cyberattackers Can Use GhostGPT to Write Malicious Code

byJai Vijayan, Contributing Writer

An iPad, iPphone, Apple Watch, AirPods, and MacBook laid out on a black table

Endpoint Security

Apple Patches Actively Exploited Zero-Day Vulnerability

Apple Patches Actively Exploited Zero-Day Vuln

byKristina Beek, Associate Editor, Dark Reading

Gold-colored padlock sitting in front of a blue cloud

Сloud Security

The Case for Proactive, Scalable Data Protection

The Case for Proactive, Scalable Data Protection

byTom Ferrucci, Chief Information Officer, Natco Home Group

North Koreans in a computer lab

Threat Intelligence

DoJ Busts Up Another Multinational DPRK IT Worker Scam

DoJ Busts Up Another Multinational DPRK IT Worker Scam

byNate Nelson, Contributing Writer

Vulnerabilities & Threats

Cisco: Critical Meeting Management Bug Requires Urgent Patch

Cisco: Critical Meeting Management Bug Requires Urgent Patch

byKristina Beek, Associate Editor, Dark Reading

Cube with "AI" on the visible sides

Vulnerabilities & Threats

Strengthening Our National Security in the AI Era

Strengthening Our National Security in the AI Era

byMike Arrowsmith, Chief Trust Officer, NinjaOne

A red Tesla Model S electric car showcased at the Brussels Motor Show

Vulnerabilities & Threats

Tesla Gear Gets Hacked Multiple Times in Pwn2Own Contests

Tesla Gear Gets Hacked Multiple Times in Pwn2Own Contests

byKristina Beek, Associate Editor, Dark Reading

A red pushpin pinpointing a location on a map

Threat Intelligence

Cloudflare CDN Bug Outs User Locations on Signal, Discord

Cloudflare CDN Bug Outs User Locations on Signal, Discord

byElizabeth Montalbano, Contributing Writer

Vulnerabilities & Threats

CISA: Ivanti Vulns Chained Together in Cyberattack Onslaught

CISA: Ivanti Vulns Chained Together in Cyberattack Onslaught

byKristina Beek, Associate Editor, Dark Reading

Shadowy face made out of 1s and 0s

Vulnerabilities & Threats

The Security Risk of Rampant Shadow AI

The Security Risk of Rampant Shadow AI

byAnuj Jaiswal, Chief Product Officer, Fortanix

Robot and human shaking hands with coins stacked in the background

Threat Intelligence

Trump Overturns Biden Rules on AI Development, Security

Trump Overturns Biden Rules on AI Development, Security

byBecky Bracken, Senior Editor, Dark Reading

A series of figures in hoods washed in red against lines of code with several yellow stars on the upper left corner

Threat Intelligence

Chinese Cyberspies Target South Korean VPN in Supply Chain Attack

Chinese Cyberspies Target South Korean VPN in Supply Chain Attack

byElizabeth Montalbano, Contributing Writer

Red bot amid a field of green bots

Vulnerabilities & Threats

Will 2025 See a Rise of NHI Attacks?

Will 2025 See a Rise of NHI Attacks?

byItzik Alvas, Co-Founder & CEO, Entro Security

A hooded figure sitting in front of laptop

Cyberattacks & Data Breaches

DONOT Group Deploys Malicious Android Apps in India

DONOT Group Deploys Malicious Android Apps in India

byJai Vijayan, Contributing Writer

Group of people standing around a person sitting at a computer, showing money and other objects.

Remote Workforce

Name That Toon: Incentives

Name That Toon: Incentives

byJohn Klossner, Cartoonist

Car component microchips

Vulnerabilities & Threats

US Ban on Automotive Components Could Curb Supply Chain

US Ban on Automotive Components Could Curb Supply Chain

byRobert Lemos, Contributing Writer

The letters "AI" in blue text with binary code running over top and in the background

Threat Intelligence

Employees Enter Sensitive Data Into GenAI Prompts Far Too Often

Employees Enter Sensitive Data Into GenAI Prompts Far Too Often

byKristina Beek, Associate Editor, Dark Reading

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.