Vulnerabilities & Threats

More Topics

Insider Threats

Ivanti logo on the side of a beige building with blue tinted window

Vulnerabilities & Threats

CISA: Ivanti Vulns Chained Together in Cyberattack Onslaught CISA: Ivanti Vulns Chained Together in Cyberattack Onslaught

The threat actors are abusing the vulnerabilities to gain initial access, obtain credentials, and install malicious scripts on user devices.

byKristina Beek, Associate Editor, Dark Reading

Jan 23, 2025

|

1 Min Read

Shadowy face made out of 1s and 0s

Vulnerabilities & Threats

The Security Risk of Rampant Shadow AI The Security Risk of Rampant Shadow AI

Jan 23, 2025

1 Min Read

Robot and human shaking hands with coins stacked in the background

Threat Intelligence

Trump Overturns Biden Rules on AI Development, Security Trump Overturns Biden Rules on AI Development, Security

byBecky Bracken, Senior Editor, Dark Reading

Jan 22, 2025

1 Min Read

A series of figures in hoods washed in red against lines of code with several yellow stars on the upper left corner

Threat Intelligence

Chinese Cyberspies Target South Korean VPN in Supply Chain Attack Chinese Cyberspies Target South Korean VPN in Supply Chain Attack

byElizabeth Montalbano, Contributing Writer

Jan 22, 2025

1 Min Read

Red bot amid a field of green bots

Vulnerabilities & Threats

Will 2025 See a Rise of NHI Attacks?Will 2025 See a Rise of NHI Attacks?

Jan 22, 2025

1 Min Read

A hooded figure sitting in front of laptop

Cyberattacks & Data Breaches

DONOT Group Deploys Malicious Android Apps in India DONOT Group Deploys Malicious Android Apps in India

byJai Vijayan, Contributing Writer

Jan 21, 2025

1 Min Read

Group of people standing around a person sitting at a computer, showing money and other objects.

Remote Workforce

Name That Toon: Incentives

Name That Toon: Incentives

byJohn Klossner, Cartoonist

Car component microchips

Vulnerabilities & Threats

US Ban on Automotive Components Could Curb Supply Chain

US Ban on Automotive Components Could Curb Supply Chain

byRobert Lemos, Contributing Writer

The letters "AI" in blue text with binary code running over top and in the background

Threat Intelligence

Employees Enter Sensitive Data Into GenAI Prompts Far Too Often

Employees Enter Sensitive Data Into GenAI Prompts Far Too Often

byKristina Beek, Associate Editor, Dark Reading

Endpoint Security

15K Fortinet Device Configs Leaked to the Dark Web

15K Fortinet Device Configs Leaked to the Dark Web

byNate Nelson, Contributing Writer

The letters LLM on a digital background with an artificial brain in the foreground

Vulnerabilities & Threats

Leveraging Behavioral Insights to Counter LLM-Enabled Hacking

Leveraging Behavioral Insights to Counter LLM-Enabled Hacking

byAybars Tuncdogan, Oguz A. Acar

The Kazakh and Russian flags

Cyberattacks & Data Breaches

Russian APT Phishes Kazakh Gov't for Strategic Intel

Russian APT Phishes Kazakh Gov't for Strategic Intel

byNate Nelson, Contributing Writer

Biden meeting on cybersecurity with business leaders

Threat Intelligence

Biden's Cybersecurity EO Leaves Trump a Comprehensive Blueprint for Defense

Biden's Cyber EO Leaves Trump a Strong Blueprint for Defense

byBecky Bracken, Senior Editor, Dark Reading

Vulnerabilities & Threats

Strategic Approaches to Threat Detection, Investigation & Response

Strategic Approaches to Threat Detection, Investigation & Response

bySameer Bhanushali, Lead Engineer/IAM Architect, Paramount Global

A shoe polish kit

Vulnerabilities & Threats

Trusted Apps Sneak a Bug Into the UEFI Boot Process

Trusted Apps Sneak a Bug Into the UEFI Boot Process

byNate Nelson, Contributing Writer

Vulnerabilities & Threats

Attackers Hijack Google Advertiser Accounts to Spread Malware

Attackers Hijack Google Advertiser Accounts to Spread Malware

byJai Vijayan, Contributing Writer

A series of binary code in orange and blue colors

Vulnerabilities & Threats

CISA: Second BeyondTrust Vulnerability Added to KEV Catalog

CISA: Second BeyondTrust Vulnerability Added to KEV Catalog

byKristina Beek, Associate Editor, Dark Reading

The North Korean flag on the key of a computer keyboard with a fingerprint on it in between the H and K keys

Threat Intelligence

North Korea's Lazarus APT Evolves Developer-Recruitment Attacks

North Korea's Lazarus Evolves Developer-Recruitment Attacks

byElizabeth Montalbano, Contributing Writer

Globe with LLM-related icons, with the words Large Language Models underneath

Vulnerabilities & Threats

OWASP's New LLM Top 10 Shows Emerging AI Threats

OWASP's New LLM Top 10 Shows Emerging AI Threats

byMatias Madou, Co-Founder & CTO, Secure Code Warrior

Closed padlock on digital background

Application Security

Microsoft Rings in 2025 With Record Security Update

Microsoft Rings in 2025 With Record Security Update

byJai Vijayan, Contributing Writer

An apple tree with roots growing underground

Vulnerabilities & Threats

Apple Bug Allows Root Protections Bypass Without Physical Access

Apple Bug Allows Root Protections Bypass Without Physical Access

byBecky Bracken, Senior Editor, Dark Reading

A white device with the word Fortinet written on it against a red background

Threat Intelligence

Zero-Day Security Bug Likely Fueling Fortinet Firewall Attacks

Zero-Day Bug Likely Fueling Fortinet Firewall Attacks

byElizabeth Montalbano, Contributing Writer

Application Security

Microsoft Cracks Down on Malicious Copilot AI Use

Microsoft Cracks Down on Malicious Copilot AI Use

byKristina Beek, Associate Editor, Dark Reading

Amelia Earhart in her Lockheed L-10E Electra preparing for 27,000 mile globe flight in 1937

Сloud Security

Cloud Attackers Exploit Max-Critical Aviatrix RCE Flaw

Cloud Attackers Exploit Max-Critical Aviatrix RCE Flaw

byJai Vijayan, Contributing Writer

Cyberattacks & Data Breaches

Telefonica Breach Exposes Jira Tickets, Customer Data

Telefonica Breach Exposes Jira Tickets, Customer Data

byKristina Beek, Associate Editor, Dark Reading

Door opening surrounded by code

Vulnerabilities & Threats

The Shifting Landscape of Open Source Security

The Shifting Landscape of Open Source Security

byChristopher Robinson, Chief Security Architect, Open Source Security Foundation

A dictionary listing for "deja vu"

Vulnerabilities & Threats

Threat Actors Exploit a Critical Ivanti RCE Bug, Again

Threat Actors Exploit a Critical Ivanti RCE Bug, Again

byNate Nelson, Contributing Writer

A banshee haunting a man, from a 19th century lithograph

Threat Intelligence

Banshee 2.0 Malware Steals Apple's Encryption to Hide on Macs

Banshee 2.0 Malware Steals Apple's Encryption to Hide on Macs

byNate Nelson, Contributing Writer

The letters AI made out of binary code

Vulnerabilities & Threats

New AI Challenges Will Test CISOs & Their Teams in 2025

New AI Challenges Will Test CISOs & Their Teams in 2025

byJosh Lemos, CISO, GitLab

Green Bay Packers' fans cheer during a game against the Indianapolis Colts in Green Bay, Wisconsin

Cyberattacks & Data Breaches

Green Bay Packers' Online Pro Shop Sacked by Payment Skimmer

Green Bay Packers' Online Pro Shop Sacked by Payment Skimmer

byTara Seals, Managing Editor, News, Dark Reading

PayPal website page open on a computer screen displaying how people can send money using the service

Threat Intelligence

Unconventional Cyberattacks Aim to Take Over PayPal Accounts

Unconventional Cyberattacks Aim to Take Over PayPal Accounts

byElizabeth Montalbano, Contributing Writer

Programming code in blue on a black background

Vulnerabilities & Threats

Best Practices & Risks Considerations in LCNC and RPA Automation

Best Practices in LCNC & RPA Automation

byJordan Bonagura, Senior Security Consultant, Secure Ideas

Close up of the US Treasury Building on the back of the US $10 bill

Cyberattacks & Data Breaches

CISA: Third-Party Data Breach Limited to Treasury Dept.

CISA: Third-Party Data Breach Limited to Treasury Dept.

byKristina Beek, Associate Editor, Dark Reading

Threat Intelligence

PhishWP Plug-in Hijacks WordPress E-Commerce Checkouts

PhishWP Plug-in Hijacks WordPress E-Commerce Checkouts

byElizabeth Montalbano, Contributing Writer

Two people standing in front of a robot and looking at a person inside the robot's torso.

Identity & Access Management Security

Name That Edge Toon: Greetings and Salutations

Name That Edge Toon: Greetings and Salutations

byJohn Klossner, Cartoonist

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.