Black Hat News

Cybersecurity Operations

CrowdStrike Tries to Patch Things Up With Cybersecurity Industry CrowdStrike Tries to Patch Things Up With Cybersecurity Industry

byFahmida Y. Rashid, Managing Editor, Features, Dark Reading

Aug 12, 2024

3 Min Read

Lorenzo Franceschi-Bicchierai, Robert McMillan, Sadia Mirza, and Sherri Davidoff on stage at Black Hat

Cyberattacks & Data Breaches

Media & Victims Find Common Ground Against Hackers Media & Victims Find Common Ground Against Hackers

byKristina Beek, Associate Editor, Dark Reading

Aug 9, 2024

4 Min Read

The News Desk booth being built on the Black Hat floor.

Threat Intelligence

Dark Reading News Desk Live From Black Hat USA 2024

Dark Reading News Desk Live From Black Hat USA 2024

byDark Reading Staff

A digital brain schematic

Application Security

How to Weaponize Microsoft Copilot for Cyberattackers

How to Weaponize Microsoft Copilot for Cyberattackers

byJeffrey Schwartz, Contributing Writer

Ann Johnson, Corporate Vice President and Deputy CISO at Microsoft, and Sherrod DeGrippo, Dir. of Threat Intelligence Strategy at Microsoft, on stage

Cybersecurity Operations

Microsoft on CISOs: Thriving Community Means Stronger Security

Microsoft on CISOs: Thriving Community Means Stronger Security

byKristina Beek, Associate Editor, Dark Reading

Hand pointing at icon labeled SaaS; various other icons surround it

Application Security

SaaS Apps Present an Abbreviated Kill Chain for Attackers

SaaS Apps Present an Abbreviated Kill Chain for Attackers

byJai Vijayan, Contributing Writer

sun behind a cloud creating shadows

Remote Workforce

Critical AWS Vulnerabilities Allow S3 Attack Bonanza

Critical AWS Vulnerabilities Allow S3 Attack Bonanza

byJeffrey Schwartz, Contributing Writer

A hand with a tiny Earth hanging from a string

Application Security

Hazy Issue in Entra ID Allows Privileged Users to Become Global Admins

Hazy Issue in Entra ID Allows Privileged Users to Become Global Admins

byNate Nelson, Contributing Writer

Founder and CTO of Knostic, Sounil Yu, collecting his award onstage

Cybersecurity Operations

Knostic Wins 2024 Black Hat Startup Spotlight Competition

Knostic Wins 2024 Black Hat Startup Spotlight Competition

byKristina Beek, Associate Editor, Dark Reading

Heads representing AI; blues and greens on a digital background with 1s and 0s

Application Security

Creating Insecure AI Assistants With Microsoft Copilot Studio Is Easy

Creating Insecure AI Assistants With Microsoft Copilot Studio Is Easy

byJeffrey Schwartz, Contributing Writer

A sunset scene with clouds against a blue sky

Сloud Security

Startup Spotlight: RAD Security Brings Behavioral Profiling to Cloud

Startup Spotlight: RAD Security Brings Behavioral Profiling to Cloud

byDark Reading Staff

Hands on a laptop dealing with multiple applications and AI

Startup Spotlight: Knostic Tackles AI's Oversharing Problem

Startup Spotlight: Knostic Tackles AI's Oversharing Problem

byDark Reading Staff

Three faucets with data in 0 and 1 flowing out of the tap.

Startup Spotlight: LeakSignal Helps Plug Leaky Data in Organizations

Startup Spotlight: LeakSignal Helps Plug Leaky Data in Organizations

byDark Reading Staff

A magnified section of computer code on a screen

Vulnerabilities & Threats

Attacks on Bytecode Interpreters Conceal Malicious Injection Activity

Attacks on Bytecode Interpreters Conceal Malicious Injection Activity

byRobert Lemos, Contributing Writer

People on stage at a conference; mics visible

Vulnerabilities & Threats

7 Sessions Not to Miss at Black Hat USA 2024

7 Sessions Not to Miss at Black Hat USA 2024

A hand holding a virtual AI display

Nvidia Embraces LLMs & Commonsense Cybersecurity Strategy

Nvidia Embraces LLMs & Commonsense Cybersecurity Strategy

byRobert Lemos, Contributing Writer

Network web overlaid over a circuit board along with a padlock

Vulnerabilities & Threats

Could Intel Have Fixed Spectre & Meltdown Bugs Earlier?

Could Intel Have Fixed Spectre & Meltdown Bugs Earlier?

byAgam Shah, Contributing Writer

Endpoint Security

Goodbye? Attackers Can Bypass 'Windows Hello' Strong Authentication

Goodbye? Attackers Can Bypass 'Windows Hello' Strong Authentication

byJeffrey Schwartz, Contributing Writer

Application Security

Swipe Right for Data Leaks: Dating Apps Expose Location, More

Swipe Right for Data Leaks: Dating Apps Expose Location, More

byElizabeth Montalbano, Contributing Writer

Quantum entanglement; conceptual artwork of a pair of entangled quantum particles or events

Quantum Leap: Advanced Computing Is a Vulnerable Cyber Target

Quantum Leap: Advanced Computing Is a Vulnerable Cyber Target

byJeffrey Schwartz, Contributing Writer

Red button on a computer keyboard that says "email security" in white

Threat Intelligence

20 Million Trusted Domains Vulnerable to Email Hosting Exploits

20 Million Trusted Domains Vulnerable to Email Hosting Exploits

byElizabeth Montalbano, Contributing Writer

Cybersecurity Careers

Training at Black Hat to Focus on Equipping Cybersecurity Leaders With Soft Skills

Training at Black Hat to Focus on Equipping Cybersecurity Leaders With Soft Skills

byJoan Goodchild

An outdoor sign showing Wi-Fi availability.

Endpoint Security

Apple Geolocation API Exposes Wi-Fi Access Points Worldwide

Apple Geolocation API Exposes Wi-Fi Access Points Worldwide

byNate Nelson, Contributing Writer

Perfect harmony of shiny chrome balls.Teamwork,Risk and Balance concept

Ensuring AI Safety While Balancing Innovation

Ensuring AI Safety While Balancing Innovation

byJoan Goodchild

Uncle Sam's hand holding a Get Out of Jail card.

Cybersecurity Operations

A CISO's Guide to Avoiding Jail After a Breach

A CISO's Guide to Avoiding Jail After a Breach

byNate Nelson, Contributing Writer

5G cellphone tower against a cloudy sky

Mobile Security

Your Phone's 5G Connection Is Vulnerable to Bypass, DoS Attacks

Your Phone's 5G Connection Is Vulnerable to Bypass, DoS Attacks

byNate Nelson, Contributing Writer

Is Defense Winning? A Look at Decades of Playing Catch-up

Is Defense Winning? A Look at Decades of Playing Catch-up

byJoan Goodchild

Dart on target, holding up a piece of paper reading "METRICS"

Cybersecurity Analytics

Rethinking How You Work With Detection and Response Metrics

Rethinking How You Work With Detection and Response Metrics

byJeffrey Schwartz, Contributing Writer

Colorful abstract illustrated design of dots

Vulnerabilities & Threats

'MagicDot' Windows Weakness Allows Unprivileged Rootkit Activity

'MagicDot' Windows Weakness Allows Unprivileged Rootkit Activity

byTara Seals, Managing Editor, News, Dark Reading

The letters EDR/XDR amid binary code

Application Security

Evil XDR: Researcher Turns Palo Alto Software Into Perfect Malware

Evil XDR: Researcher Turns Palo Alto Software Into Perfect Malware

byNate Nelson, Contributing Writer

Cones and spools of colorful sewing thread organized by color from red, orange, yellow, blue

Application Security

Sneaky Shellcode: Windows Fibers Offer EDR-Proof Code Execution

Sneaky Shellcode: Windows Fibers Offer EDR-Proof Code Execution

byTara Seals, Managing Editor, News, Dark Reading

man pointing to cloud

Сloud Security

Open Source Tool Looks for Signals in Noisy AWS Cloud Logs

Open Source Tool Looks for Signals in Noisy AWS Cloud Logs

byRobert Lemos, Contributing Writer

A hand holding a tablet device with a hologram of a digital brain floating above it

Сloud Security

ML Model Repositories: The Next Big Supply Chain Attack Target

ML Model Repositories: The Next Big Supply Chain Attack Target

byJai Vijayan, Contributing Writer

A mobile device with a red screen on which is a triangle with an exclamation point in the middle

Endpoint Security

Sophisticated Vishing Campaigns Take World by Storm

Sophisticated Vishing Campaigns Take World by Storm

byElizabeth Montalbano, Contributing Writer

blue data lock electronic

To Spot Attacks Through AI Models, Companies Need Visibility

To Spot Attacks Through AI Models, Companies Need Visibility

byRobert Lemos, Contributing Writer

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.