Vulnerabilities & Threats

More Topics

Insider Threats

A human hand pointing to the letters API in the center of a blue backdrop with various technology icons around it

Сloud Security

Docusign API Abused in Widescale, Novel Invoice Attack Docusign API Abused in Widescale, Novel Invoice Attack

Attackers are exploiting the "Envelopes: create API" of the enormously popular document-signing service to flood corporate inboxes with convincing phishing emails aimed at defrauding organizations. It's an unusual attack vector with a high success rate.

byElizabeth Montalbano, Contributing Writer

Nov 5, 2024

|

1 Min Read

human centered centric cybersecurity

Cybersecurity Operations

Oh, the Humanity! How to Make Humans Part of Cybersecurity Design How to Make Humans Part of Cybersecurity Design

byRobert Lemos, Contributing Writer

Nov 5, 2024

1 Min Read

The words "Zero Trust" in purple on two sides of a cube; blue, digital background

Vulnerabilities & Threats

How to Win at Cyber by Influencing People How to Win at Cyber by Influencing People

byGregory R. Simpson

Nov 5, 2024

1 Min Read

Black background and white text saying Dark Reading Confidential

Dark Reading Confidential: Quantum Has Landed, So Now What?Dark Reading Confidential: Quantum Has Landed, So Now What?

byDark Reading Staff

Nov 5, 2024

31 Min Listen

The word "vote" with red, white, and blue hands reaching up

Vulnerabilities & Threats

On Election Day, Disinformation Worries Security Pros the Most On Election Day, Disinformation Worries Security Pros the Most

byTara Seals, Managing Editor, News, Dark Reading

Nov 5, 2024

1 Min Read

Iran flag cyber APT

Vulnerabilities & Threats

Iranian APT Group Targets IP Cameras, Extends Attacks Beyond Israel Iranian APT Group Targets IP Cameras, Extends Attacks Beyond Israel

byRobert Lemos, Contributing Writer

Nov 5, 2024

1 Min Read

Vulnerabilities & Threats

Okta Fixes Auth Bypass Bug After 3-Month Lull

Okta Fixes Auth Bypass Bug After 3-Month Lull

byDark Reading Staff

A virtual computer screen above a keyboard

Vulnerabilities & Threats

OWASP Beefs Up GenAI Security Guidance Amid Growing Deepfakes

OWASP Beefs Up GenAI Security Guidance Amid Growing Deepfakes

byRobert Lemos, Contributing Writer

The letters LLM in 3D on top of the words Large Language Model against black backdrop

Application Security

Google: Big Sleep AI Agent Puts SQLite Software Bug to Bed

Google: Big Sleep AI Agent Puts SQLite Software Bug to Bed

byElizabeth Montalbano, Contributing Writer

Key with label "UPDATES" on keyboard

Vulnerabilities & Threats

Can Automatic Updates for Critical Infrastructure Be Trusted?

Can Automatic Updates for Critical Infrastructure Be Trusted?

byJohn Paul Cunningham

Application Security

Privacy Anxiety Pushes Microsoft Recall AI Release Again

Privacy Anxiety Pushes Microsoft Recall AI Release Again

byBecky Bracken, Senior Editor, Dark Reading

Creative API hologram on blurry background. Application Programming Interface concept.

Application Security

4 Main API Security Risks Organizations Need to Address

4 Main API Security Risks Organizations Need to Address

byJai Vijayan, Contributing Writer

Steel factory, blast furnaces at twilight

Vulnerabilities & Threats

Critical Auth Bugs Expose Smart Factory Gear to Cyberattack

Critical Auth Bugs Expose Smart Factory Gear to Cyberattack

byTara Seals, Managing Editor, News, Dark Reading

Red spy image on a die, coming between black silhouettes on multiple dice; yellow background

Vulnerabilities & Threats

IT Security Centralization Makes the Use of Industrial Spies More Profitable

IT Security Centralization Makes the Use of Industrial Spies More Profitable

byAybars Tuncdogan, Fulya Acikgoz

A little egret in a pond wanders too close to a pair of American Alligators sunning on the grassy verge.

Threat Intelligence

The Overlooked Importance of Identifying Riskiest Users

The Overlooked Importance of Identifying Riskiest Users

byGarrett Hamilton

Black computer keyboard with white letters with a red and white North Korea flag and a fingerprint on one key between the letters H and K

Endpoint Security

North Korea's Andariel Pivots to 'Play' Ransomware Games

North Korea's Andariel Pivots to 'Play' Ransomware Games

byElizabeth Montalbano, Contributing Writer

Vulnerabilities & Threats

The Case Against Abandoning CrowdStrike Post-Outage

The Case Against Abandoning CrowdStrike Post-Outage

byVishaal "V8" Hariprasad

Broken, rusty wrench

Vulnerabilities & Threats

When Cybersecurity Tools Backfire

When Cybersecurity Tools Backfire

byYvonne Dickinson

Puppies

Vulnerabilities & Threats

'CrossBarking' Attack Targeted Secret APIs, Exposing Opera Browser Users

'CrossBarking' Attack Targeted Secret APIs, Exposing Opera Browser Users

byNate Nelson, Contributing Writer

Password hash with salt crypt function concept 3d illustration

Vulnerabilities & Threats

Recurring Windows Flaw Could Expose User Credentials

Recurring Windows Flaw Could Expose User Credentials

byJai Vijayan, Contributing Writer

Close-up portrait of a Giant Panda eating bamboo leaves

Сloud Security

China's 'Evasive Panda' APT Debuts High-End Cloud Hijacking

China's 'Evasive Panda' APT Debuts High-End Cloud Hijacking

byTara Seals, Managing Editor, News, Dark Reading

Windows Update running on a laptop screen

Application Security

Windows 'Downdate' Attack Reverts Patched PCs to a Vulnerable State

Windows 'Downdate' Attack Reverts Patched PCs to a Vulnerable State

byJai Vijayan, Contributing Writer

Side view of Ukraine soldiers' shoulder patches

Threat Intelligence

Russia Kneecaps Ukraine Army Recruitment With Spoofed 'Civil Defense' App

Russia Kneecaps Ukraine Army Recruitment With Fake 'Civil Defense' App

byBecky Bracken, Senior Editor, Dark Reading

White hex code in front of a green light

Application Security

Mozilla: ChatGPT Can Be Manipulated Using Hex Code

Mozilla: ChatGPT Can Be Manipulated Using Hex Code

byNate Nelson, Contributing Writer

Zombie hand pushes up from the ground, surrounded by pumpkins

Vulnerabilities & Threats

Put End-of-Life Software to Rest

Put End-of-Life Software to Rest

A stylized chip design with the words Vulnhuntr across.

Application Security

Open Source LLM Tool Sniffs Out Python Zero-Days

Open Source LLM Tool Sniffs Out Python Bugs

byDark Reading Staff

Vulnerabilities & Threats

Grip Security Releases 2025 SaaS Security Risks Report

Grip Security Releases 2025 SaaS Security Risks Report

Close-up of stethoscope on black computer keyboard

Cyberattacks & Data Breaches

Microsoft: Healthcare Sees 300% Surge in Ransomware Attacks

Microsoft: Healthcare Sees 300% Surge in Ransomware Attacks

byDark Reading Staff

Vulnerabilities & Threats

Critical Bug Exploited in Fortinet's Management Console

Critical Bug Exploited in Fortinet's Management Console

byNate Nelson, Contributing Writer

Code magnified

Application Security

'Shift Left' Gets Pushback, Triggers Security Soul Searching

'Shift Left' Gets Pushback, Triggers Security Soul Searching

byRobert Lemos, Contributing Writer

Application Security

Cisco ASA, FTD Software Under Active VPN Exploitation

Cisco ASA, FTD Software Under Active VPN Exploitation

byDark Reading Staff

Alcoholic Martinez Cocktail with Gin Vermouth and Orange Peel

Vulnerabilities & Threats

AI Chatbots Ditch Guardrails After 'Deceptive Delight' Cocktail

AI Chatbots Ditch Guardrails After 'Deceptive Delight' Cocktail

byTara Seals, Managing Editor, News, Dark Reading

Empty boardroom table, with water glasses and chairs

Vulnerabilities & Threats

Why Cybersecurity Acumen Matters in the C-Suite

Why Cybersecurity Acumen Matters in the C-Suite

Prometheus' liver being attacked by an eagle

Threat Intelligence

'Prometei' Botnet Spreads Its Cryptojacker Worldwide

'Prometei' Botnet Spreads Its Cryptojacker Worldwide

byNate Nelson, Contributing Writer

Bitcoin replica coins on North Korea flag

Cyberattacks & Data Breaches

Lazarus Group Exploits Chrome Zero-Day in Latest Campaign

Lazarus Group Exploits Chrome Zero-Day in Latest Campaign

byJai Vijayan, Contributing Writer

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.