News

developer working on a laptop with abstract design behind him
Vulnerabilities & Threats
Code-Injection Bugs Bite Google, Apache Open Source GitHub ProjectsCode-Injection Bugs Bite Google, Apache Open Source GitHub Projects

The insecurities exist in CI/CD pipelines and can be used by attackers to subvert modern development and roll out malicious code at deployment.

byEricka Chickowski, Contributing Writer
Sep 1, 2022
|
3 Min Read
green and red apple with worm coming out
Vulnerabilities & Threats
Apple Quietly Releases Another Patch for Zero-Day RCE BugApple Quietly Releases Another Patch for Zero-Day RCE Bug
byElizabeth Montalbano, Contributing Writer
Sep 1, 2022
4 Min Read
Silhouette of a hand holding a padlock in front of the google chrome logo
Vulnerabilities & Threats
Google Fixes 24 Vulnerabilities With New Chrome UpdateGoogle Fixes 24 Vulnerabilities With New Chrome Update
byJai Vijayan, Contributing Writer
Aug 31, 2022
4 Min Read
Zebra and wildlife at the watering hole, Mizumi Safari Park, Tanzania, East Africa, Africa
Vulnerabilities & Threats
Crypto-Crooks Spread Trojanized Google Translate App in Watering-Hole AttackCrypto-Crooks Spread Trojanized Google Translate App in Watering-Hole Attack
byTara Seals, Managing Editor, News, Dark Reading
Aug 31, 2022
4 Min Read
image of james webb space telescope
Vulnerabilities & Threats
James Webb Telescope Images Loaded With Malware Are Evading EDRJames Webb Telescope Images Loaded With Malware Are Evading EDR
byDark Reading Staff
Aug 31, 2022
1 Min Read
Screen displaying TikTok app icon
Vulnerabilities & Threats
TikTok for Android Bug Allows Single-Click Account HijackTikTok for Android Bug Allows Single-Click Account Hijack
byElizabeth Montalbano, Contributing Writer
Aug 31, 2022
3 Min Read
Image of Google Chrome browser start page
Vulnerabilities & Threats
Malicious Chrome Extensions Plague 1.4M Users
Malicious Chrome Extensions Plague 1.4M Users
Aug 30, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
people in red hoods overlaid with an image of chinese flag and computer code
Vulnerabilities & Threats
Chinese Hackers Target Energy Sector in Australia, South China Sea
Chinese Hackers Target Energy Sector in Australia, South China Sea
Aug 30, 2022
|
4 Min Read
byNathan Eddy, Contributing Writer
a fish hook against the backdrop of 0 and 1, with the tags for username and password.
Сloud Security
Phishing Campaign Targets PyPI Users to Distribute Malicious Code
Phishing Campaign Targets PyPI Users to Distribute Malicious Code
Aug 30, 2022
|
4 Min Read
byElizabeth Montalbano, Contributing Writer
Photo of entrance to a glass building with a large Google sign
Vulnerabilities & Threats
Google Expands Bug Bounties to Its Open Source Projects
Google Expands Bug Bounties to Its Open Source Projects
Aug 30, 2022
|
4 Min Read
byRobert Lemos, Contributing Writer
mobile device with screen locked due to security breach
Vulnerabilities & Threats
Receipt for €8M iOS Zero-Day Sale Pops Up on Dark Web
Receipt for €8M iOS Zero-Day Sale Pops Up on Dark Web
Aug 29, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
scrabble tiles positioned to read insurance and security
Cyber Risk
Cyber-Insurance Firms Limit Payouts, Risk Obsolescence
Cyber-Insurance Firms Limit Payouts, Risk Obsolescence
Aug 29, 2022
|
5 Min Read
byRobert Lemos, Contributing Writer
blue hacker hands over keyboard
Vulnerabilities & Threats
NATO Investigates Dark Web Leak of Data Stolen From Missile Vendor
NATO Investigates Dark Web Leak of Data Stolen From Missile Vendor
Aug 29, 2022
|
3 Min Read
byElizabeth Montalbano, Contributing Writer
Abstract with computer code
Сloud Security
LastPass Suffers Data Breach, Source Code Stolen
LastPass Suffers Data Breach, Source Code Stolen
Aug 26, 2022
|
2 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Blurred hands on computer keyboard.
Vulnerabilities & Threats
'Sliver' Emerges as Cobalt Strike Alternative for Malicious C2
'Sliver' Emerges as Cobalt Strike Alternative for Malicious C2
Aug 26, 2022
|
5 Min Read
byJai Vijayan, Contributing Writer
Okta logo on a mobile phone screen
Remote Workforce
Twilio Hackers Scarf 10K Okta Credentials in Sprawling Supply Chain Attack
Twilio Hackers Scarf 10K Okta Credentials in Sprawling Supply Chain Attack
Aug 25, 2022
|
4 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Black laptop with red coding script on screen
Threat Intelligence
More Bang for the Buck: Cross-Platform Ransomware Is the Next Problem
More Bang for the Buck: Cross-Platform Ransomware Is the Next Problem
Aug 25, 2022
|
3 Min Read
byRobert Lemos, Contributing Writer
Picture of a woman with technical images depicting her tech knowledge
Remote Workforce
Senior-Level Women Leaders in Cybersecurity Form New Nonprofit
Senior-Level Women Leaders in Cybersecurity Form New Nonprofit
Aug 25, 2022
|
3 Min Read
byKelly Jackson Higgins, Editor-in-Chief, Dark Reading
Hikvision video surveillance camera
Vulnerabilities & Threats
Thousands of Organizations Remain at Risk From Critical Zero-Click IP Camera Bug
Thousands of Organizations Remain at Risk From Critical Zero-Click IP Camera Bug
Aug 25, 2022
|
4 Min Read
byJai Vijayan, Contributing Writer
Joshua Hampl, a dark-haired man in a blue shirt, codes in a laboratory of digital forensics in Germany
Mobile Security
New Exterro FTK Update Accelerates Mobile Digital Forensics
New Exterro FTK Update Accelerates Mobile Digital Forensics
Aug 25, 2022
|
2 Min Read
byDark Reading Staff, Dark Reading
DDoS distributed denial-of-service
Vulnerabilities & Threats
CISA: Just-Disclosed Palo Alto Networks Firewall Bug Under Active Exploit
CISA: Just-Disclosed Palo Alto Networks Firewall Bug Under Active Exploit
Aug 24, 2022
|
4 Min Read
byTara Seals, Managing Editor, News, Dark Reading
A silky spider web in front of a blurred rain forest view
Threat Intelligence
Efficient 'MagicWeb' Malware Subverts AD FS Authentication, Microsoft Warns
Efficient 'MagicWeb' Malware Subverts AD FS Authentication, Microsoft Warns
Aug 24, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
Photo of an empty hospital hallway with empty gurneys.
Vulnerabilities & Threats
Ransomware Gang Demands $10M in Attack on French Hospital
Ransomware Gang Demands $10M in Attack on French Hospital
Aug 24, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
VMware logo against abstract multicolored background
Сloud Security
VMware LPE Bug Allows Cyberattackers to Feast on Virtual Machine Data
VMware LPE Bug Allows Cyberattackers to Feast on Virtual Machine Data
Aug 24, 2022
|
2 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Tropical school of fish in Mauritius.
Сloud Security
Unusual Microsoft 365 Phishing Campaign Spoofs eFax Via Compromised Dynamics Voice Account
Unusual Microsoft 365 Phishing Campaign Spoofs eFax Via Compromised Dynamics Voice Account
Aug 24, 2022
|
5 Min Read
byElizabeth Montalbano, Contributing Writer
photo of a computer screen with GitLab's web page
Vulnerabilities & Threats
DevSecOps Gains Traction — but Security Still Lags
DevSecOps Gains Traction — but Security Still Lags
Aug 23, 2022
|
4 Min Read
byRobert Lemos, Contributing Writer
Concept illustration of cybersecurity, identity and access management
Cybersecurity Operations
Thoma Bravo Buying Spree Highlights Hot Investor Interest in IAM Market
Thoma Bravo Buying Spree Highlights Hot Investor Interest in IAM Market
Aug 23, 2022
|
4 Min Read
byJai Vijayan, Contributing Writer
laptop showing Twitter home page
Сloud Security
Mudge Blows Whistle on Alleged Twitter Security Nightmare
Mudge Blows Whistle on Alleged Twitter Security Nightmare
Aug 23, 2022
|
5 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Close up of a Burmese python coiled up
Application Security
One-Third of Popular PyPI Packages Mistakenly Flagged as Malicious
One-Third of Popular PyPI Packages Mistakenly Flagged as Malicious
Aug 23, 2022
|
4 Min Read
byRobert Lemos, Contributing Writer
Photo of tabby kitten walking in a field of grass and wildflowers.
Endpoint Security
Charming Kitten APT Wields New Scraper to Steal Email Inboxes
Charming Kitten APT Wields New Scraper to Steal Email Inboxes
Aug 23, 2022
|
3 Min Read
byElizabeth Montalbano, Contributing Writer
Woman sitting in front of computer laptop with error message pop-up on the screen
Cyberattacks & Data Breaches
Fake DDoS Protection Alerts Distribute Dangerous RAT
Fake DDoS Protection Alerts Distribute Dangerous RAT
Aug 22, 2022
|
3 Min Read
byJai Vijayan, Contributing Writer
Photo of HD Moore, a cleanshaven man with short brown hair. He is wearing a dark suit and tie.
Cybersecurity Operations
Metasploit Creator Renames His Startup and IT Discovery Tool Rumble to 'runZero'
Metasploit Creator Renames His Startup and IT Discovery Tool Rumble to 'runZero'
Aug 22, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
Photo of ransomware-infected laptop with police tape across it.
Сloud Security
New 'BianLian' Ransomware Variant on the Rise
New 'BianLian' Ransomware Variant on the Rise
Aug 22, 2022
|
3 Min Read
byElizabeth Montalbano, Contributing Writer
Apple security concept showing an unlocked padlock beside an Apple logo
Vulnerabilities & Threats
Patch Now: 2 Apple Zero-Days Exploited in Wild
Patch Now: 2 Apple Zero-Days Exploited in Wild
Aug 19, 2022
|
4 Min Read
byJai Vijayan, Contributing Writer
Blurry overhead shot of a hoodie-wearing hacker typing on a laptop
Remote Workforce
State-Sponsored APTs Dangle Job Opps to Lure In Spy Victims
State-Sponsored APTs Dangle Job Opps to Lure In Spy Victims
Aug 19, 2022
|
3 Min Read
byJeffrey Schwartz, Contributing Writer

Editor's Choice

Starbucks logo on a storefront
Cyberattacks & Data Breaches
Ransomware Attack on Blue Yonder Hits Starbucks, SupermarketsRansomware Attack on Blue Yonder Hits Starbucks, Supermarkets
byJai Vijayan, Contributing Writer
Nov 25, 2024
4 Min Read
thumbnail
Сloud Security
Nearly Two Dozen AWS APIs Are Vulnerable to AbuseNearly Two Dozen AWS APIs Are Vulnerable to Abuse
byJai Vijayan, Contributing Writer
Nov 17, 2020
4 Min Read
Male hand holding a tablet, with a car floating above it; black background
Vulnerabilities & Threats
My Car Knows My Secrets, and I'm (Mostly) OK With ThatMy Car Knows My Secrets, and I'm (Mostly) OK With That
byKyle Hanslovan
Nov 26, 2024
5 Min Read
Reports
More Reports
Webinars
More Webinars
White Papers
More Whitepapers
Events
More Events
Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
Subscribe