News

Illustration of a blue-glowing circuit board whose CPU has a glowing red bug on it
Vulnerabilities & Threats
Why Bug-Bounty Programs Are Failing EveryoneWhy Bug-Bounty Programs Are Failing Everyone

In a Black Hat USA talk, Katie Moussouris will discuss why bug-bounty programs are failing in their goals, and what needs to happen next to use bounties in a way that improves security outcomes.

byEricka Chickowski, Contributing Writer
Jul 29, 2022
|
3 Min Read
thumbnail
Application Security
Security Teams Overwhelmed With Bugs, Bitten by Patch PrioritizationSecurity Teams Overwhelmed With Bugs, Bitten by Patch Prioritization
byRobert Lemos, Contributing Writer
Jul 29, 2022
3 Min Read
Hacker in a dark wearing hoody and cap sitting in front of computer with digital China flag background and binary code
Сloud Security
Big Questions Remain Around Massive Shanghai Police Data BreachBig Questions Remain Around Massive Shanghai Police Data Breach
byJai Vijayan, Contributing Writer
Jul 29, 2022
4 Min Read
Logo for the npm software package repository.
Cyber Risk
Malicious npm Packages Scarf Up Discord Tokens, Credit Card InfoMalicious npm Packages Scarf Up Discord Tokens, Credit Card Info
byNathan Eddy, Contributing Writer
Jul 29, 2022
5 Min Read
thumbnail
Сloud Security
Patch Now: Atlassian Confluence Bug Under Active ExploitPatch Now: Atlassian Confluence Bug Under Active Exploit
byTara Seals, Managing Editor, News, Dark Reading
Jul 28, 2022
2 Min Read
thumbnail
Endpoint Security
APT-Like Phishing Threat Mirrors Landing PagesAPT-Like Phishing Threat Mirrors Landing Pages
byNathan Eddy, Contributing Writer
Jul 28, 2022
5 Min Read
Planets and a rocketship
Cyber Risk
1,000s of Phishing Attacks Blast Off From InterPlanetary File System
1,000s of Phishing Attacks Blast Off From InterPlanetary File System
Jul 28, 2022
|
4 Min Read
byNathan Eddy, Contributing Writer
Computer user touching on Microsoft word icon to open the program.
Endpoint Security
In a Post-Macro World, Container Files Emerge as Malware-Delivery Replacement
In a Post-Macro World, Container Files Emerge as Malware-Delivery Replacement
Jul 28, 2022
|
5 Min Read
byJai Vijayan, Contributing Writer
Endpoint Security
Multiple Windows, Adobe Zero-Days Anchor Knotweed Commercial Spyware
Multiple Windows, Adobe Zero-Days Anchor Knotweed Commercial Spyware
Jul 27, 2022
|
2 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Image of North Korean flag
Endpoint Security
US Offers $10M Double-Reward for North Korea Cyberattacker Info
US Offers $10M Double-Reward for North Korea Cyberattacker Info
Jul 27, 2022
|
1 Min Read
byBecky Bracken, Senior Editor, Dark Reading
Money
Cyber Risk
Average Data Breach Costs Soar to $4.4M in 2022
Average Data Breach Costs Soar to $4.4M in 2022
Jul 27, 2022
|
5 Min Read
byRobert Lemos, Contributing Writer
Illustration of a computer keyboard where all the letters are replaced with glowing red skull logos representing ransomware
Cyberattacks & Data Breaches
LockBit 3.0: Significantly Improved Ransomware Helps the Gang Stay on Top
LockBit 3.0: Significantly Improved Ransomware Helps the Gang Stay on Top
Jul 26, 2022
|
4 Min Read
byRobert Lemos, Contributing Writer
signage at Microsoft campus
Cyberattacks & Data Breaches
Microsoft Tops Brands Phishers Prefer
Microsoft Tops Brands Phishers Prefer
Jul 26, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
Finger touching screen with words insider threat on it
Cyber Risk
Economic Downturn Raises Risk of Insiders Going Rogue
Economic Downturn Raises Risk of Insiders Going Rogue
Jul 26, 2022
|
5 Min Read
byJai Vijayan, Contributing Writer
abstract image of mobile phone and floating text message boxes to illustrate a messaging application
Application Security
Discord, Telegram Services Hijacked to Launch Array of Cyberattacks
Discord, Telegram Services Hijacked to Launch Array of Cyberattacks
Jul 26, 2022
|
2 Min Read
byBecky Bracken, Senior Editor, Dark Reading
Application Security
Ducktail Spear-Phishing Campaign Uses LinkedIn to Hijack Facebook Business Accounts
Ducktail Spear-Phishing Campaign Uses LinkedIn to Hijack Facebook Business Accounts
Jul 26, 2022
|
4 Min Read
byNathan Eddy, Contributing Writer
Photo depicting space
Endpoint Security
Rare 'CosmicStrand' UEFI Rootkit Swings into Cybercrime Orbit
Rare 'CosmicStrand' UEFI Rootkit Swings into Cybercrime Orbit
Jul 25, 2022
|
5 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Concept image of pirated software
Cyberattacks & Data Breaches
Supercharged Version of Amadey Infostealer & Malware Dropper Bypasses AVs
Supercharged Version of Amadey Infostealer & Malware Dropper Bypasses AVs
Jul 25, 2022
|
4 Min Read
byJai Vijayan, Contributing Writer
Smartphone screen depicting a cyber attack
Application Security
T-Mobile Pitches $4-Per-Customer Settlement for Data Leak Impacting 80M People
T-Mobile Pitches $4-Per-Customer Settlement for Data Leak Impacting 80M People
Jul 25, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
Image of a malware warning displayed on a mobile device screen
Cyberattacks & Data Breaches
Qakbot Is Back With a New Trick: DLL Sideloading
Qakbot Is Back With a New Trick: DLL Sideloading
Jul 25, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
User holding smart phone
Vulnerabilities & Threats
Critical Filewave MDM Vulnerabilities Allow Attackers Full Mobile Device Control
Critical Filewave MDM Vulnerabilities Allow Attackers Full Mobile Device Control
Jul 25, 2022
|
3 Min Read
byNathan Eddy, Contributing Writer
Cowboy on a horse--roundup
Application Security
ICYMI: Neopets & the Gaming Problem; SolarWinds Hackers Are Back; Google Ads Abused
ICYMI: Neopets & the Gaming Problem; SolarWinds Hackers Are Back; Google Ads Abused
Jul 22, 2022
|
7 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Atlassian homepage on computer screen
Vulnerabilities & Threats
Critical Bugs Threaten to Crack Atlassian Confluence Workspaces Wide Open
Critical Bugs Threaten to Crack Atlassian Confluence Workspaces Wide Open
Jul 22, 2022
|
4 Min Read
byJai Vijayan, Contributing Writer
Closeup photo of eye, to illustrate digital spying
Cyberattacks & Data Breaches
Google Chrome Zero-Day Weaponized to Spy on Journalists
Google Chrome Zero-Day Weaponized to Spy on Journalists
Jul 22, 2022
|
2 Min Read
byBecky Bracken, Senior Editor, Dark Reading
VMware logo on website
Cyberattacks & Data Breaches
Snowballing Ransomware Variants Highlight Growing Threat to VMware ESXi Environments
Snowballing Ransomware Variants Highlight Growing Threat to VMware ESXi Environments
Jul 22, 2022
|
5 Min Read
byJai Vijayan, Contributing Writer
Fish in ocean representing phishing schemes
Cyberattacks & Data Breaches
Phishing Bonanza: Social-Engineering Savvy Skyrockets as Malicious Actors Cash In
Phishing Bonanza: Social-Engineering Savvy Skyrockets as Malicious Actors Cash In
Jul 22, 2022
|
5 Min Read
byNathan Eddy, Contributing Writer
Threat Intelligence
Mysterious, Cloud-Enabled macOS Spyware Blows Onto the Scene
Mysterious, Cloud-Enabled macOS Spyware Blows Onto the Scene
Jul 21, 2022
|
5 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Tablet with Google Cloud homepage displayed
Application Security
Google Becomes First Cloud Operator to Join Healthcare ISAC
Google Becomes First Cloud Operator to Join Healthcare ISAC
Jul 21, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
Threat Intelligence
The Market Is Teeming: Bargains on Dark Web Give Novice Cybercriminals a Quick Start
The Market Is Teeming: Bargains on Dark Web Give Novice Cybercriminals a Quick Start
Jul 21, 2022
|
4 Min Read
byRobert Lemos, Contributing Writer
Bitcoin image
Application Security
Cybercrime Group TA4563 Targets DeFi Market With Evolving Evilnum Backdoor
Cybercrime Group TA4563 Targets DeFi Market With Evolving Evilnum Backdoor
Jul 21, 2022
|
4 Min Read
byNathan Eddy, Contributing Writer
software code intended to illustrate a malicious botnet attack
Application Security
Lax Security Fuels Massive 8220 Gang Botnet Army Surge
Lax Security Fuels Massive 8220 Gang Botnet Army Surge
Jul 20, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
Shadowy figure representing a hacker
Threat Intelligence
'AIG' Threat Group Launches With Unique Business Model
'AIG' Threat Group Launches With Unique Business Model
Jul 20, 2022
|
4 Min Read
byJai Vijayan, Contributing Writer
Beach in Maui
Threat Intelligence
Feds Recoup $500K From Maui Ransomware Gang
Feds Recoup $500K From Maui Ransomware Gang
Jul 20, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading
Representation of digital data
Threat Intelligence
Chaotic LAPSUS$ Group Goes Quiet, but Threat Likely Persists
Chaotic LAPSUS$ Group Goes Quiet, but Threat Likely Persists
Jul 20, 2022
|
5 Min Read
byNathan Eddy, Contributing Writer
hands on laptop ordering from a restaurant online
Application Security
Ongoing Magecart Campaign Targets Online Ordering at Local Restaurants
Ongoing Magecart Campaign Targets Online Ordering at Local Restaurants
Jul 19, 2022
|
1 Min Read
byDark Reading Staff, Dark Reading

Editor's Choice

Starbucks logo on a storefront
Cyberattacks & Data Breaches
Ransomware Attack on Blue Yonder Hits Starbucks, SupermarketsRansomware Attack on Blue Yonder Hits Starbucks, Supermarkets
byJai Vijayan, Contributing Writer
Nov 25, 2024
4 Min Read
thumbnail
Сloud Security
Nearly Two Dozen AWS APIs Are Vulnerable to AbuseNearly Two Dozen AWS APIs Are Vulnerable to Abuse
byJai Vijayan, Contributing Writer
Nov 17, 2020
4 Min Read
Male hand holding a tablet, with a car floating above it; black background
Vulnerabilities & Threats
My Car Knows My Secrets, and I'm (Mostly) OK With ThatMy Car Knows My Secrets, and I'm (Mostly) OK With That
byKyle Hanslovan
Nov 26, 2024
5 Min Read
Reports
More Reports
Webinars
More Webinars
White Papers
More Whitepapers
Events
More Events
Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
Subscribe