News

Daisy chain necklace on a black wooden step
Vulnerabilities & Threats
Multiple Vulnerabilities Discovered in Device42 Asset Management ApplianceMultiple Vulnerabilities Discovered in Device42 Asset Management Appliance

Four serious security issues on the popular appliance could be exploited by hackers with any level of access within the host network, Bitdefender researchers say.

byNathan Eddy, Contributing Writer
Aug 10, 2022
|
3 Min Read
Concept illustration for zero trust network access
Identity & Access Management Security
Many ZTNA, MFA Tools Offer Little Protection Against Cookie Session Hijacking AttacksMany ZTNA, MFA Tools Offer Little Protection Against Cookie Session Hijacking Attacks
byJai Vijayan, Contributing Writer
Aug 10, 2022
4 Min Read
Viktor Gazdag photo
Application Security
Software Development Pipelines Offer Cybercriminals 'Free-Range' Access to Cloud, On-PremSoftware Development Pipelines Offer Cybercriminals 'Free-Range' Access to Cloud, On-Prem
byTara Seals, Managing Editor, News, Dark Reading
Aug 9, 2022
7 Min Read
Photo of a stopwatch
Vulnerabilities & Threats
Microsoft Patches Zero-Day Actively Exploited in the WildMicrosoft Patches Zero-Day Actively Exploited in the Wild
byRobert Lemos, Contributing Writer
Aug 9, 2022
4 Min Read
Illustration of a hand reaching out to grasp a glowing padlock on a matrix of white lines to illustrate cybersecurity
Cyberattacks & Data Breaches
Halo Security Emerges From Stealth With Full Attack Surface Management PlatformHalo Security Emerges From Stealth With Full Attack Surface Management Platform
byDark Reading Staff
Aug 9, 2022
2 Min Read
Picture of a gray computer keyboard where the Enter key is replaced with a bright blue key marked Update
Cyber Risk
Researchers Debut Fresh RCE Vector for Common Google API ToolResearchers Debut Fresh RCE Vector for Common Google API Tool
byNathan Eddy, Contributing Writer
Aug 9, 2022
5 Min Read
A login screen with a padlock icon and fields for username and password overlaid on a hand typing on a keyboard
Cybersecurity Operations
Abusing Kerberos for Local Privilege Escalation
Abusing Kerberos for Local Privilege Escalation
Aug 9, 2022
|
3 Min Read
byEricka Chickowski, Contributing Writer
Ukrainian and Russian flags
Threat Intelligence
Russia-Ukraine Conflict Holds Cyberwar Lessons
Russia-Ukraine Conflict Holds Cyberwar Lessons
Aug 9, 2022
|
4 Min Read
byRobert Lemos, Contributing Writer
Burmese python
Application Security
10 Malicious Code Packages Slither into PyPI Registry
10 Malicious Code Packages Slither into PyPI Registry
Aug 8, 2022
|
3 Min Read
byJai Vijayan, Contributing Writer
Hacker; background colors are that of the Ukraine flag
Cyber Risk
Deepfakes Grow in Sophistication, Cyberattacks Rise Following Ukraine War
Deepfakes Grow in Sophistication, Cyberattacks Rise Following Ukraine War
Aug 8, 2022
|
3 Min Read
byNathan Eddy, Contributing Writer
VIP
Endpoint Security
Genesis IAB Market Brings Polish to the Dark Web
Genesis IAB Market Brings Polish to the Dark Web
Aug 5, 2022
|
4 Min Read
byNathan Eddy, Contributing Writer
Concept illustration of dark web
Cyber Risk
A Ransomware Explosion Fosters Thriving Dark Web Ecosystem
A Ransomware Explosion Fosters Thriving Dark Web Ecosystem
Aug 5, 2022
|
5 Min Read
byJai Vijayan, Contributing Writer
Person sitting in front of a laptop, typing a security code into a smartphone.
Сloud Security
Stolen Data Gives Attackers Advantage Against Text-Based 2FA
Stolen Data Gives Attackers Advantage Against Text-Based 2FA
Aug 5, 2022
|
4 Min Read
byRobert Lemos, Contributing Writer
Silhouette of a b-boy striking a pose amid stage smoke
Threat Intelligence
Fresh RapperBot Malware Variant Brute-Forces Its Way Into SSH Servers
Fresh RapperBot Malware Variant Brute-Forces Its Way Into SSH Servers
Aug 5, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
Image of a cloud burst on the horizon, with lightning lighting up a purple pile of clouds
Сloud Security
Cyberattackers Increasingly Target Cloud IAM as a Weak Link
Cyberattackers Increasingly Target Cloud IAM as a Weak Link
Aug 4, 2022
|
4 Min Read
byTara Seals, Managing Editor, News, Dark Reading
bug on microchip to illustrate a software bug
Endpoint Security
Time to Patch VMware Products Against a Critical New Vulnerability
Time to Patch VMware Products Against a Critical New Vulnerability
Aug 4, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
photo of an insect
Endpoint Security
Bug in Kaspersky VPN Client Allows Privilege Escalation
Bug in Kaspersky VPN Client Allows Privilege Escalation
Aug 4, 2022
|
2 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Chinese flag
Cyber Risk
Massive China-Linked Disinformation Campaign Taps PR Firm for Help
Massive China-Linked Disinformation Campaign Taps PR Firm for Help
Aug 4, 2022
|
3 Min Read
byNathan Eddy, Contributing Writer
GitHub logo
Vulnerabilities & Threats
35K Malicious Code Insertions in GitHub: Attack or Bug-Bounty Effort?
35K Malicious Code Insertions in GitHub: Attack or Bug-Bounty Effort?
Aug 4, 2022
|
6 Min Read
byRobert Lemos, Contributing Writer
Person made of 0s and 1s to show digital identity
Endpoint Security
Ping Identity to Go Private After $2.8B Acquisition
Ping Identity to Go Private After $2.8B Acquisition
Aug 4, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
Green silhouette of a person made up of 0 and 1
Identity & Access Management Security
Startup Footprint Tackles Identity Verification
Startup Footprint Tackles Identity Verification
Aug 3, 2022
|
2 Min Read
byDark Reading Staff, Dark Reading
Cyber Risk
How IT Teams Can Use 'Harm Reduction' for Better Cybersecurity Outcomes
How IT Teams Can Use 'Harm Reduction' for Better Cybersecurity Outcomes
Aug 3, 2022
|
5 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Image depicting a patch on fabric.
Endpoint Security
Critical RCE Bug in DrayTek Routers Opens SMBs to Zero-Click Attacks
Critical RCE Bug in DrayTek Routers Opens SMBs to Zero-Click Attacks
Aug 3, 2022
|
5 Min Read
byTara Seals, Managing Editor, News, Dark Reading
python logo on screen with code
Threat Intelligence
School Kid Uploads Ransomware Scripts to PyPI Repository as 'Fun' Project
School Kid Uploads Ransomware Scripts to PyPI Repository as 'Fun' Project
Aug 3, 2022
|
4 Min Read
byJai Vijayan, Contributing Writer
Image of physical Solana coin
Сloud Security
Cyberattackers Drain Nearly $6M From Solana Crypto Wallets
Cyberattackers Drain Nearly $6M From Solana Crypto Wallets
Aug 3, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
Image of many small fish swimming in the ocean, above the ocean floor.
Сloud Security
American Express, Snapchat Open-Redirect Vulnerabilities Exploited in Phishing Scheme
American Express, Snapchat Open-Redirect Vulnerabilities Exploited in Phishing Scheme
Aug 3, 2022
|
2 Min Read
byNathan Eddy, Contributing Writer
Twitter bird logo on a metallic background
Endpoint Security
Thousands of Mobile Apps Leaking Twitter API Keys
Thousands of Mobile Apps Leaking Twitter API Keys
Aug 2, 2022
|
4 Min Read
byJai Vijayan, Contributing Writer
Image of login credentials being dangled at the end of a fish hook to illustrate a credential phishing attack.
Cyberattacks & Data Breaches
Massive New Phishing Campaign Targets Microsoft Email Service Users
Massive New Phishing Campaign Targets Microsoft Email Service Users
Aug 2, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
Image of phone and laptop to illustrate multifactor authentication
Cyberattacks & Data Breaches
T-Mobile Store Owner Made $25M Using Stolen Employee Credentials
T-Mobile Store Owner Made $25M Using Stolen Employee Credentials
Aug 2, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
Sign outside Microsoft building
Threat Intelligence
Microsoft Intros New Attack Surface Management, Threat Intel Tools
Microsoft Intros New Attack Surface Management, Threat Intel Tools
Aug 2, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
Photo of Google office building
Vulnerabilities & Threats
VirusTotal: Threat Actors Mimic Legitimate Apps, Use Stolen Certs to Spread Malware
VirusTotal: Threat Actors Mimic Legitimate Apps, Use Stolen Certs to Spread Malware
Aug 2, 2022
|
4 Min Read
byNathan Eddy, Contributing Writer
Image of Department of Justice sign outside its DC headquarters
Cyberattacks & Data Breaches
DoJ: Foreign Adversaries Breach US Federal Court Records
DoJ: Foreign Adversaries Breach US Federal Court Records
Aug 1, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
image on screen that files have been locked due to a ransomware attack
Cyber Risk
Ransomware Hit on European Pipeline & Energy Supplier Encevo Linked to BlackCat
Ransomware Hit on European Pipeline & Energy Supplier Encevo Linked to BlackCat
Aug 1, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
Computer screen with icons of multiple browsers
Сloud Security
Chromium Browsers Allow Data Exfiltration via Bookmark Syncing
Chromium Browsers Allow Data Exfiltration via Bookmark Syncing
Aug 1, 2022
|
5 Min Read
byJai Vijayan, Contributing Writer
Endpoint Security
ICYMI: Dark Web Happenings Edition With Evil Corp., MSP Targeting & More
ICYMI: Dark Web Happenings Edition With Evil Corp., MSP Targeting & More
Jul 29, 2022
|
4 Min Read
byTara Seals, Managing Editor, News, Dark Reading

Editor's Choice

Starbucks logo on a storefront
Cyberattacks & Data Breaches
Ransomware Attack on Blue Yonder Hits Starbucks, SupermarketsRansomware Attack on Blue Yonder Hits Starbucks, Supermarkets
byJai Vijayan, Contributing Writer
Nov 25, 2024
4 Min Read
thumbnail
Сloud Security
Nearly Two Dozen AWS APIs Are Vulnerable to AbuseNearly Two Dozen AWS APIs Are Vulnerable to Abuse
byJai Vijayan, Contributing Writer
Nov 17, 2020
4 Min Read
Male hand holding a tablet, with a car floating above it; black background
Vulnerabilities & Threats
My Car Knows My Secrets, and I'm (Mostly) OK With ThatMy Car Knows My Secrets, and I'm (Mostly) OK With That
byKyle Hanslovan
Nov 26, 2024
5 Min Read
Reports
More Reports
Webinars
More Webinars
White Papers
More Whitepapers
Events
More Events
Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
Subscribe