Vulnerabilities & Threats

More Topics

Insider Threats

Hand pointing at an icon that says RDP; blue background

Threat Intelligence

Midnight Blizzard Taps Phishing Emails, Rogue RDP Nets Midnight Blizzard Taps Phishing Emails, Rogue RDP Nets

The Russian-based attack group uses legitimate red-team tools, 200 domain names, and 34 back-end RDP servers, making it harder to identify and block malicious activity.

byJai Vijayan, Contributing Writer

Dec 18, 2024

|

1 Min Read

Texas Tech Red Raiders quarterback Tyler Shough and Ole Miss Rebels linebacker Khari Coleman (23) collide at the goal line

Cyberattacks & Data Breaches

Texas Tech Fumbles Medical Data in Massive Breach Texas Tech Fumbles Medical Data in Massive Breach

byTara Seals, Managing Editor, News, Dark Reading

Dec 17, 2024

1 Min Read

Cloud drawing lit up inside by connected lines and lights against black backdrop above a network of lines and lights

Сloud Security

Azure Data Factory Bugs Expose Cloud Infrastructure Azure Data Factory Bugs Expose Cloud Infrastructure

byElizabeth Montalbano, Contributing Writer

Dec 17, 2024

1 Min Read

The word CYBERCRIME over image of hands on a laptop keyboard

Vulnerabilities & Threats

To Defeat Cybercriminals, Understand How They Think To Defeat Cybercriminals, Understand How They Think

byBen Barrontine

Dec 17, 2024

1 Min Read

A classroom: A male teacher wearing a blue sweater stands in front of young children at their desks, some raising their hands

Vulnerabilities & Threats

The Education Industry: Why Its Data Must Be Protected The Education Industry: Why Its Data Must Be Protected

Dec 16, 2024

1 Min Read

open-source tools

Application Security

Generative AI Security Tools Go Open Source Generative AI Security Tools Go Open Source

byRobert Lemos, Contributing Writer

Dec 13, 2024

1 Min Read

A Coral AI USB accelerator

Vulnerabilities & Threats

With 'TPUXtract,' Attackers Can Steal Orgs' AI Models

With 'TPUXtract,' Attackers Can Steal Orgs' AI Models

byNate Nelson, Contributing Writer

Various symbols representing low-code/no-code development

Vulnerabilities & Threats

OData Injection Risk in Low-Code/No-Code Environments

OData Injection Risk in Low-Code/No-Code Environments

byAmichai Shulman, CTO & Co-Founder, Nokod Security

Statue of Prometheus, viewed from the back

Сloud Security

336K Prometheus Instances Exposed to DoS, 'Repojacking'

336K Prometheus Instances Exposed to DoS, 'Repojacking'

byNate Nelson, Contributing Writer

Salt shakers with a blue and while background

Vulnerabilities & Threats

Efforts to Secure US Telcos Beset by Salt Typhoon Might Fall Flat

Efforts to Secure US Telcos Beset by Salt Typhoon Might Fall Flat

byNate Nelson, Contributing Writer

A stop sign that misspells it SOTP. To err is human.

Cyberattacks & Data Breaches

Cybersecurity Lessons From 3 Public Breaches

Cybersecurity Lessons From 3 Public Breaches

byDmytro Tereshchenko, CISO, Sigma Software Group

Hand reaching into a screen of 1s and 0s

Cyberattacks & Data Breaches

Tips for Preventing Breaches in 2025

Tips for Preventing Breaches in 2025

byPukar C. Hamal, Founder & CEO, SecurityPal

The words "Zero-day exploit" on a computer keyboard.

Cyberattacks & Data Breaches

'Termite' Ransomware Likely Behind Cleo Zero-Day Attacks

'Termite' Ransomware Likely Behind Cleo Zero-Day Attacks

byJai Vijayan, Contributing Writer

The Debating Chamber of the Scottish Parliament in Holyrood, Edinburgh, Scotland

Cyberattacks & Data Breaches

Scottish Parliament TV at Risk From Deepfakes

Scottish Parliament TV at Risk From Deepfakes

byKristina Beek, Associate Editor, Dark Reading

Metal chain with a broken link

Vulnerabilities & Threats

Lessons From the Largest Software Supply Chain Incidents

Lessons From the Largest Software Supply Chain Incidents

byEldan Ben-Haim, Chief Architect Officer, Apiiro

The words "zero-day" written in a line of code on a computer screen

Application Security

Microsoft NTLM Zero-Day to Remain Unpatched Until April

Microsoft NTLM Zero-Day to Remain Unpatched Until April

byJai Vijayan, Contributing Writer

Gloved hand stealing money out of man's shirt pocket

Cyberattacks & Data Breaches

Millionaire Airbnb Phishing Ring Busted Up by Police

Millionaire Airbnb Phishing Ring Busted Up by Police

byBecky Bracken, Senior Editor, Dark Reading

QR code displayed on a mobile device next to lines of code with the outline of a shield with a padlock in the middle on top

Endpoint Security

Attackers Can Use QR Codes to Bypass Browser Isolation

Attackers Can Use QR Codes to Bypass Browser Isolation

byElizabeth Montalbano, Contributing Writer

a patchwork quilt

Vulnerabilities & Threats

Google Launches Open Source Patch Validation Tool

Google Launches Open Source Patch Validation Tool

byJennifer Lawinski, Contributing Writer

Globe with cybersecurity symbols circling it

Vulnerabilities & Threats

Large-Scale Incidents & the Art of Vulnerability Prioritization

Large-Scale Incidents & the Art of Vulnerability Prioritization

byAudra Streetman, Senior Threat Intelligence Analyst, Splunk

software components connected development

Application Security

Open Source Security Priorities Get a Reshuffle

Open Source Security Priorities Get a Reshuffle

byRobert Lemos, Contributing Writer

Library of Congress Offers AI Legal Guidance to Researchers

Library of Congress Offers AI Legal Guidance to Researchers

byRobert Lemos, Contributing Writer

Vulnerabilities & Threats

Bypass Bug Revives Critical N-Day in Mitel MiCollab

Bypass Bug Revives Critical N-Day in Mitel MiCollab

byNate Nelson, Contributing Writer

Abstract image of red human figure surrounded by black human figures

Threat Intelligence

Trojan-as-a-Service Hits Euro Banks, Crypto Exchanges

Trojan-as-a-Service Hits Euro Banks, Crypto Exchanges

byBecky Bracken, Senior Editor, Dark Reading

Bar graph that asks, Benefits of GenAI/LLM: What are the benefits of using GenAI and/or LLMs in a cybersecurity program?

Vulnerabilities & Threats

LLMs Raise Efficiency, Productivity of Cybersecurity Teams

LLMs Raise Efficiency, Productivity of Cybersecurity Teams

byKaren Spiegelman, Features Editor

Yellow robot arm in factor setting

Vulnerabilities & Threats

Vulnerability Management Challenges in IoT & OT Environments

Vulnerability Management Challenges in IoT & OT Environments

byMalleswar Reddy Yerabolu, Senior Security Engineer, North Carolina Department of Health and Human Services

American and Chinese flags on computer keyboard keys

Cyberattacks & Data Breaches

CISA Issues Guidance to Telecom Sector on Salt Typhoon Threat

CISA Issues Guidance to Telecom Sector on Salt Typhoon Threat

byJai Vijayan, Contributing Writer

Vulnerabilities & Threats

Veeam Urges Updates After Discovering Critical Vulnerability

Veeam Urges Updates After Discovering Critical Vulnerability

byKristina Beek, Associate Editor, Dark Reading

Rubber stamped labeled REGULATIONS, with a binder filled with paper behind it

Vulnerabilities & Threats

Navigating the Changing Landscape of Cybersecurity Regulations

Navigating the Changing Landscape of Cybersecurity Regulations

byMichael McLaughlin, Co-Leader, Cybersecurity and Data Privacy Practice Group, Buchanan Ingersoll & Rooney

Hypertext Transfer Protocol Secure Concept, with representations of tools and documents and certificates

Vulnerabilities & Threats

Digital Certificates With Shorter Lifespans Reduce Security Vulnerabilities

Digital Certificates With Shorter Lifespans Reduce Vulnerabilities

byStephen Lawton, Contributing Writer

Concept illustration of a content delivery network on a world map

Application Security

Misconfigured WAFs Heighten DoS, Breach Risks

Misconfigured WAFs Heighten DoS, Breach Risks

byJai Vijayan, Contributing Writer

Vulnerabilities & Threats

KnowBe4 Releases the Latest Phishing Trends in Q3 2024 Phishing Report

KnowBe4 Releases the Latest Phishing Trends in Q3 2024 Phishing Report

Cybersecurity Operations

Note From the Editor-in-Chief

Note From the Editor-in-Chief

byKelly Jackson Higgins, Editor-in-Chief, Dark Reading

Vulnerabilities & Threats

Decade-Old Cisco Vulnerability Under Active Exploit

Decade-Old Cisco Vulnerability Under Active Exploit

byKristina Beek, Associate Editor, Dark Reading

Group of co-workers talking together while sitting in a circle in an office

Vulnerabilities & Threats

Cyber-Unsafe Employees Increasingly Put Orgs at Risk

Cyber-Unsafe Employees Increasingly Put Orgs at Risk

byKristina Beek, Associate Editor, Dark Reading

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.