Threat Intelligence

Breaking news, news analysis, and expert commentary on cybersecurity threat intelligence, including tools & technologies.

A human hand pointing to the letters API in the center of a blue backdrop with various technology icons around it

Сloud Security

Docusign API Abused in Widescale, Novel Invoice Attack Docusign API Abused in Widescale, Novel Invoice Attack

Attackers are exploiting the "Envelopes: create API" of the enormously popular document-signing service to flood corporate inboxes with convincing phishing emails aimed at defrauding organizations. It's an unusual attack vector with a high success rate.

byElizabeth Montalbano, Contributing Writer

Nov 5, 2024

|

1 Min Read

The word "vote" with red, white, and blue hands reaching up

Vulnerabilities & Threats

On Election Day, Disinformation Worries Security Pros the Most On Election Day, Disinformation Worries Security Pros the Most

byTara Seals, Managing Editor, News, Dark Reading

Nov 5, 2024

1 Min Read

The Pakistan flag projected on a computer screen showing program code

Cyberattacks & Data Breaches

APT36 Refines Tools in Attacks on Indian Targets APT36 Refines Tools in Attacks on Indian Targets

byJai Vijayan, Contributing Writer

Nov 4, 2024

1 Min Read

A still from the 2013 Hollywood movie "Pacific Rim"

Threat Intelligence

Chinese APTs Cash In on Years of Edge Device Attacks Chinese APTs Cash In on Years of Edge Device Attacks

byNate Nelson, Contributing Writer

Nov 1, 2024

1 Min Read

A little egret in a pond wanders too close to a pair of American Alligators sunning on the grassy verge.

Threat Intelligence

The Overlooked Importance of Identifying Riskiest Users The Overlooked Importance of Identifying Riskiest Users

byGarrett Hamilton

Nov 1, 2024

1 Min Read

Black computer keyboard with white letters with a red and white North Korea flag and a fingerprint on one key between the letters H and K

Endpoint Security

North Korea's Andariel Pivots to 'Play' Ransomware Games North Korea's Andariel Pivots to 'Play' Ransomware Games

byElizabeth Montalbano, Contributing Writer

Oct 31, 2024

1 Min Read

Chinese Navy guided-missile destroyer Xian steams ahead

Cyberattacks & Data Breaches

China Says Seabed Sentinels Are Spying, After Trump Taps

China Says Seabed Sentinels Are Spying, After Trump Taps

byTara Seals, Managing Editor, News, Dark Reading

Giant blue letters spelling out AI in a dark blue background

White House Outlines AI's Role in National Security

White House Outlines AI's Role in National Security

byJennifer Lawinski, Contributing Writer

A screen showing gears concept illustration for RDP, Remote Desktop Protocol

Cyberattacks & Data Breaches

'Midnight Blizzard' Targets Networks With Signed RDP Files

'Midnight Blizzard' Targets Networks With Signed RDP Files

byJai Vijayan, Contributing Writer

Password hash with salt crypt function concept 3d illustration

Vulnerabilities & Threats

Recurring Windows Flaw Could Expose User Credentials

Recurring Windows Flaw Could Expose User Credentials

byJai Vijayan, Contributing Writer

Close-up portrait of a Giant Panda eating bamboo leaves

Сloud Security

China's 'Evasive Panda' APT Debuts High-End Cloud Hijacking

China's 'Evasive Panda' APT Debuts High-End Cloud Hijacking

byTara Seals, Managing Editor, News, Dark Reading

Person with their back to the camera in hooded sweatshirt with FBI on the back facing a flat map of the world with red dots marking various locations

Threat Intelligence

FBI, Partners Disrupt RedLine, Meta Stealer Operations

FBI, Partners Disrupt RedLine, Meta Stealer Operations

byElizabeth Montalbano, Contributing Writer

Puzzle pieces made up of people trying to get pieces together.

Identity & Access Management Security

Sophos-SecureWorks Deal Focuses on Building Advanced MDR, XDR Platform

Sophos-SecureWorks Deal Focuses on Advanced MDR, XDR Platform

byJeffrey Schwartz, Contributing Writer

Windows Update running on a laptop screen

Application Security

Windows 'Downdate' Attack Reverts Patched PCs to a Vulnerable State

Windows 'Downdate' Attack Reverts Patched PCs to a Vulnerable State

byJai Vijayan, Contributing Writer

China's flag behind a cyber matrix

Threat Intelligence

China's Elite Cyber Corps Hone Skills on Virtual Battlefields

China's Elite Cyber Corps Hone Skills on Virtual Battlefields

byRobert Lemos, Contributing Writer

Side view of Ukraine soldiers' shoulder patches

Threat Intelligence

Russia Kneecaps Ukraine Army Recruitment With Spoofed 'Civil Defense' App

Russia Kneecaps Ukraine Army Recruitment With Fake 'Civil Defense' App

byBecky Bracken, Senior Editor, Dark Reading

White hex code in front of a green light

Application Security

Mozilla: ChatGPT Can Be Manipulated Using Hex Code

Mozilla: ChatGPT Can Be Manipulated Using Hex Code

byNate Nelson, Contributing Writer

A bear lying in a tree

Cyberattacks & Data Breaches

Russia's APT29 Mimics AWS Domains to Steal Windows Credentials

Russia's APT29 Mimics AWS Domains to Steal Windows Credentials

byNate Nelson, Contributing Writer

Green energy security windmill solar farm

Cybersecurity Isn't Easy When You're Trying to Be Green

Cybersecurity Isn't Easy When You're Trying to Be Green

byRobert Lemos, Contributing Writer

Amazon Web Services S3 homepage on screen

Threat Intelligence

AWS's Predictable Bucket Names Make Accounts Easier to Crack

AWS's Predictable Bucket Names Make Accounts Easier to Crack

byBecky Bracken, Senior Editor, Dark Reading

Threat Intelligence

Jake Williams Joins Hunter Strategy As VP of RND & Managing Director of Hunter Labs

Jake Williams Joins Hunter Strategy As VP of RND & Managing Director of Hunter Labs

Alcoholic Martinez Cocktail with Gin Vermouth and Orange Peel

Vulnerabilities & Threats

AI Chatbots Ditch Guardrails After 'Deceptive Delight' Cocktail

AI Chatbots Ditch Guardrails After 'Deceptive Delight' Cocktail

byTara Seals, Managing Editor, News, Dark Reading

Prometheus' liver being attacked by an eagle

Threat Intelligence

'Prometei' Botnet Spreads Its Cryptojacker Worldwide

'Prometei' Botnet Spreads Its Cryptojacker Worldwide

byNate Nelson, Contributing Writer

Bitcoin replica coins on North Korea flag

Cyberattacks & Data Breaches

Lazarus Group Exploits Chrome Zero-Day in Latest Campaign

Lazarus Group Exploits Chrome Zero-Day in Latest Campaign

byJai Vijayan, Contributing Writer

Man blindfolded with russian colors to represent propaganda

Vulnerabilities & Threats

Russian Trolls Pose as Reputable Media to Sow US Election Chaos

Russians Trolls Pose as Reputable Media to Sow US Election Chaos

byBecky Bracken, Senior Editor, Dark Reading

Bumblebee on a flower

Threat Intelligence

Bumblebee Malware Is Buzzing Back to Life

Bumblebee Malware Is Buzzing Back to Life

byBecky Bracken, Senior Editor, Dark Reading

Samsung SID2001A CPU on hard disk drive control board

Endpoint Security

Samsung Zero-Day Vuln Under Active Exploit, Google Warns

Samsung Zero-Day Vuln Under Active Exploit, Google Warns

byDark Reading Staff

The words "Hack password" within program code on a computer screen

Vulnerabilities & Threats

OPA for Windows Vulnerability Exposes NTLM Hashes

OPA for Windows Vulnerability Exposes NTLM Hashes

byJai Vijayan, Contributing Writer

A person's hand putting a voting ballot into a box

Most US Political Campaigns Lack DMARC Email Protection

Most US Political Campaigns Lack DMARC Email Protection

byDark Reading Staff

Endpoint Security

Swarms of Fake WordPress Plug-ins Infect Sites With Infostealers

Swarms of Fake WordPress Plug-ins Infect Sites With Infostealers

byElizabeth Montalbano, Contributing Writer

CAPTCHA ("I am not a robot") displayed on screen

Cyberattacks & Data Breaches

Tricky CAPTCHA Caught Dropping Lumma Stealer Malware

Tricky CAPTCHA Caught Dropping Lumma Stealer Malware

byBecky Bracken, Senior Editor, Dark Reading

A digital map of japan

Cyberattacks & Data Breaches

Russia-Linked Hackers Attack Japan's Govt, Ports

Russia-Linked Hackers Attack Japan's Govt, Ports

byRobert Lemos, Contributing Writer

Сloud Security

Cisco Disables DevHub Access After Security Breach

Cisco Disables DevHub Access After Security Breach

byJai Vijayan, Contributing Writer

Woman at desk holding a pen with left hand and right hand above a computer keyboard in front of a screen showing a mail icon and red warning circle

Threat Intelligence

Anti-Bot Services Help Cybercrooks Bypass Google 'Red Page'

Anti-Bot Services Help Cybercrooks Bypass Google 'Red Page'

byElizabeth Montalbano, Contributing Writer

Laptop keyboard with keys marked SAFETY (green key with white letters) and RISK (red key with white letters)

Supply Chain Cybersecurity Beyond Traditional Vendor Risk Management

Supply Chain Cybersecurity Beyond Traditional Vendor Risk Management

byMalleswar Reddy Yerabolu

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.