Black Hat News

network globe DNS DNSSEC

Сloud Security

DNSSEC Denial-of-Service Attacks Show Technology's Fragility DNSSEC Denial-of-Service Attacks Show Technology's Fragility

byRobert Lemos, Contributing Writer

Dec 24, 2024

4 Min Read

A Wi-Fi hotspot in a airport

ICS/OT Security

IoT Cloud Cracked by 'Open Sesame' Over-the-Air Attack IoT Cloud Cracked by 'Open Sesame' Over-the-Air Attack

byBecky Bracken, Senior Editor, Dark Reading

Dec 12, 2024

3 Min Read

A glowing purple and pink key, with dots and numbers in the background

Symmetrical Cryptography Pioneer Targets the Post-Quantum Era

Symmetrical Cryptography Pioneer Targets the Post-Quantum Era

byKristina Beek, Associate Editor, Dark Reading

Cybersecurity Operations

CrowdStrike Tries to Patch Things Up With Cybersecurity Industry

CrowdStrike Tries to Patch Things Up With Cybersecurity Industry

byFahmida Y. Rashid, Managing Editor, Features

Lorenzo Franceschi-Bicchierai, Robert McMillan, Sadia Mirza, and Sherri Davidoff on stage at Black Hat

Cyberattacks & Data Breaches

Media & Victims Find Common Ground Against Hackers

Media & Victims Find Common Ground Against Hackers

byKristina Beek, Associate Editor, Dark Reading

The News Desk booth being built on the Black Hat floor.

Threat Intelligence

Dark Reading News Desk Live From Black Hat USA 2024

Dark Reading News Desk Live From Black Hat USA 2024

byDark Reading Staff, Dark Reading

A digital brain schematic

Application Security

How to Weaponize Microsoft Copilot for Cyberattackers

How to Weaponize Microsoft Copilot for Cyberattackers

byJeffrey Schwartz, Contributing Writer

Ann Johnson, Corporate Vice President and Deputy CISO at Microsoft, and Sherrod DeGrippo, Dir. of Threat Intelligence Strategy at Microsoft, on stage

Cybersecurity Operations

Microsoft on CISOs: Thriving Community Means Stronger Security

Microsoft on CISOs: Thriving Community Means Stronger Security

byKristina Beek, Associate Editor, Dark Reading

Hand pointing at icon labeled SaaS; various other icons surround it

Application Security

SaaS Apps Present an Abbreviated Kill Chain for Attackers

SaaS Apps Present an Abbreviated Kill Chain for Attackers

byJai Vijayan, Contributing Writer

sun behind a cloud creating shadows

Remote Workforce

Critical AWS Vulnerabilities Allow S3 Attack Bonanza

Critical AWS Vulnerabilities Allow S3 Attack Bonanza

byJeffrey Schwartz, Contributing Writer

A hand with a tiny Earth hanging from a string

Application Security

Hazy Issue in Entra ID Allows Privileged Users to Become Global Admins

Hazy Issue in Entra ID Allows Privileged Users to Become Global Admins

byNate Nelson, Contributing Writer

Founder and CTO of Knostic, Sounil Yu, collecting his award onstage

Cybersecurity Operations

Knostic Wins 2024 Black Hat Startup Spotlight Competition

Knostic Wins 2024 Black Hat Startup Spotlight Competition

byKristina Beek, Associate Editor, Dark Reading

Heads representing AI; blues and greens on a digital background with 1s and 0s

Application Security

Creating Insecure AI Assistants With Microsoft Copilot Studio Is Easy

Creating Insecure AI Assistants With Microsoft Copilot Studio Is Easy

byJeffrey Schwartz, Contributing Writer

A sunset scene with clouds against a blue sky

Сloud Security

Startup Spotlight: RAD Security Brings Behavioral Profiling to Cloud

Startup Spotlight: RAD Security Brings Behavioral Profiling to Cloud

byDark Reading Staff, Dark Reading

Hands on a laptop dealing with multiple applications and AI

Startup Spotlight: Knostic Tackles AI's Oversharing Problem

Startup Spotlight: Knostic Tackles AI's Oversharing Problem

byDark Reading Staff, Dark Reading

Three faucets with data in 0 and 1 flowing out of the tap.

Startup Spotlight: LeakSignal Helps Plug Leaky Data in Organizations

Startup Spotlight: LeakSignal Helps Plug Leaky Data in Organizations

byDark Reading Staff, Dark Reading

A magnified section of computer code on a screen

Vulnerabilities & Threats

Attacks on Bytecode Interpreters Conceal Malicious Injection Activity

Attacks on Bytecode Interpreters Conceal Malicious Injection Activity

byRobert Lemos, Contributing Writer

People on stage at a conference; mics visible

Vulnerabilities & Threats

7 Sessions Not to Miss at Black Hat USA 2024

7 Sessions Not to Miss at Black Hat USA 2024

byMeny Har, CEO & Co-Founder, Opus Security

A hand holding a virtual AI display

Nvidia Embraces LLMs & Commonsense Cybersecurity Strategy

Nvidia Embraces LLMs & Commonsense Cybersecurity Strategy

byRobert Lemos, Contributing Writer

Network web overlaid over a circuit board along with a padlock

Vulnerabilities & Threats

Could Intel Have Fixed Spectre & Meltdown Bugs Earlier?

Could Intel Have Fixed Spectre & Meltdown Bugs Earlier?

byAgam Shah, Contributing Writer

Endpoint Security

Goodbye? Attackers Can Bypass 'Windows Hello' Strong Authentication

Goodbye? Attackers Can Bypass 'Windows Hello' Strong Authentication

byJeffrey Schwartz, Contributing Writer

Application Security

Swipe Right for Data Leaks: Dating Apps Expose Location, More

Swipe Right for Data Leaks: Dating Apps Expose Location, More

byElizabeth Montalbano, Contributing Writer

Quantum entanglement; conceptual artwork of a pair of entangled quantum particles or events

Quantum Leap: Advanced Computing Is a Vulnerable Cyber Target

Quantum Leap: Advanced Computing Is a Vulnerable Cyber Target

byJeffrey Schwartz, Contributing Writer

Red button on a computer keyboard that says "email security" in white

Threat Intelligence

20 Million Trusted Domains Vulnerable to Email Hosting Exploits

20 Million Trusted Domains Vulnerable to Email Hosting Exploits

byElizabeth Montalbano, Contributing Writer

Cybersecurity Careers

Training at Black Hat to Focus on Equipping Cybersecurity Leaders With Soft Skills

Training at Black Hat to Focus on Equipping Cybersecurity Leaders With Soft Skills

byJoan Goodchild, Contributing Writer

An outdoor sign showing Wi-Fi availability.

Endpoint Security

Apple Geolocation API Exposes Wi-Fi Access Points Worldwide

Apple Geolocation API Exposes Wi-Fi Access Points Worldwide

byNate Nelson, Contributing Writer

Perfect harmony of shiny chrome balls.Teamwork,Risk and Balance concept

Ensuring AI Safety While Balancing Innovation

Ensuring AI Safety While Balancing Innovation

byJoan Goodchild, Contributing Writer

Uncle Sam's hand holding a Get Out of Jail card.

Cybersecurity Operations

A CISO's Guide to Avoiding Jail After a Breach

A CISO's Guide to Avoiding Jail After a Breach

byNate Nelson, Contributing Writer

5G cellphone tower against a cloudy sky

Mobile Security

Your Phone's 5G Connection Is Vulnerable to Bypass, DoS Attacks

Your Phone's 5G Connection Is Vulnerable to Bypass, DoS Attacks

byNate Nelson, Contributing Writer

Is Defense Winning? A Look at Decades of Playing Catch-up

Is Defense Winning? A Look at Decades of Playing Catch-up

byJoan Goodchild, Contributing Writer

Dart on target, holding up a piece of paper reading "METRICS"

Cybersecurity Analytics

Rethinking How You Work With Detection and Response Metrics

Rethinking How You Work With Detection and Response Metrics

byJeffrey Schwartz, Contributing Writer

Colorful abstract illustrated design of dots

Vulnerabilities & Threats

'MagicDot' Windows Weakness Allows Unprivileged Rootkit Activity

'MagicDot' Windows Weakness Allows Unprivileged Rootkit Activity

byTara Seals, Managing Editor, News, Dark Reading

The letters EDR/XDR amid binary code

Application Security

Evil XDR: Researcher Turns Palo Alto Software Into Perfect Malware

Evil XDR: Researcher Turns Palo Alto Software Into Perfect Malware

byNate Nelson, Contributing Writer

Cones and spools of colorful sewing thread organized by color from red, orange, yellow, blue

Application Security

Sneaky Shellcode: Windows Fibers Offer EDR-Proof Code Execution

Sneaky Shellcode: Windows Fibers Offer EDR-Proof Code Execution

byTara Seals, Managing Editor, News, Dark Reading

man pointing to cloud

Сloud Security

Open Source Tool Looks for Signals in Noisy AWS Cloud Logs

Open Source Tool Looks for Signals in Noisy AWS Cloud Logs

byRobert Lemos, Contributing Writer

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.