Vulnerabilities & Threats

More Topics

Insider Threats

A burning piece of white paper

Threat Intelligence

Microsoft-Signed Chinese Adware Opens the Door to Kernel Privileges Microsoft-Signed Chinese Adware Opens the Door to Kernel Privileges

An official stamp of approval might give the impression that a purported "HotPage" adtech tool is not, in fact, a dangerous kernel-level malware — but that's just subterfuge.

byNate Nelson, Contributing Writer

Jul 18, 2024

|

1 Min Read

Old-fashioned Joker card

AI Remains a Wild Card in the War Against Disinformation AI Remains a Wild Card in the War Against Disinformation

byErin Drake, Melissa DeOrio

Jul 18, 2024

1 Min Read

Threat Intelligence

Iranian Cyber-Threat Group Drops New Backdoor, 'BugSleep'Iranian Cyber-Threat Group Drops New Backdoor, 'BugSleep'

byRobert Lemos, Contributing Writer

Jul 18, 2024

1 Min Read

White light padlock icon over an led computer screen monitor display of binary 1s and 0s

Cyberattacks & Data Breaches

Threat Actors Ramp Up Use of Encoded URLs to Bypass Secure Email Threat Actors Ramp Up Use of Encoded URLs to Bypass Secure Email

byJai Vijayan, Contributing Writer

Jul 17, 2024

1 Min Read

A lit up orange, yellow, and blue printed circuit board with the letters AI standing on top of it

Threat Intelligence

Orgs Are Finally Making Moves to Mitigate GenAI Risks Orgs Are Finally Making Moves to Mitigate GenAI Risks

byJai Vijayan, Contributing Writer

Jul 17, 2024

1 Min Read

Snowflake on a light blue background

Threat Intelligence

Snowflake Account Attacks Driven by Exposed Legitimate Credentials Snowflake Account Attacks Driven by Exposed Legitimate Credentials

byStephanie Schneider

Jul 17, 2024

1 Min Read

A spiderweb covered in rain droplets in front of blurred greenery

Threat Intelligence

Microsoft: Scattered Spider Widens Web With RansomHub & Qilin

Microsoft: Scattered Spider Widens Web With RansomHub & Qilin

byKristina Beek, Associate Editor, Dark Reading

A Turkish flag waving on a pole

Threat Intelligence

Shadowroot Ransomware Lures Turkish Victims via Phishing Attacks

Shadowroot Ransomware Lures Turkish Victims via Phishing Attacks

byDark Reading Staff, Dark Reading

banshee like screaming crone

Threat Intelligence

Void Banshee APT Exploits Microsoft Zero-Day in Spear-Phishing Attacks

Void Banshee APT Exploits Microsoft Zero-Day in Spear-Phishing Attacks

byElizabeth Montalbano, Contributing Writer

OCBC Bank sign

Endpoint Security

Singapore Banks Ditch One-Time Passwords

Singapore Banks Ditch One-Time Passwords

byDark Reading Staff, Dark Reading

People holding scissors to a red ribbon

Threat Intelligence

Ransomware Gang Rebrands as 'APT Inc.,' Keeps Old Methods

Ransomware Gang Rebrands as 'APT Inc.,' Keeps Old Methods

byDark Reading Staff, Dark Reading

Close up of store front signage of a Rite Aid

Cyberattacks & Data Breaches

Rite Aid Becomes RansomHub's Latest Victim After Data Breach

Rite Aid Becomes RansomHub's Latest Victim After Data Breach

byDark Reading Staff, Dark Reading

Application Security

GitLab Sends Users Scrambling Again With New CI/CD Pipeline Takeover Vuln

GitLab Sends Users Scrambling Again With New CI/CD Pipeline Takeover Vuln

byJai Vijayan, Contributing Writer

Vulnerabilities & Threats

CISA, FBI Warn of OS Command-Injection Vulnerabilities

CISA, FBI Warn of OS Command Injection Vulnerabilities

byDark Reading Staff, Dark Reading

A person holding an iPhone lit up by a projector showcasing binary code

Endpoint Security

Apple Warns iPhone Users in 98 Countries of More Spyware Attacks

Apple Warns iPhone Users in 98 Countries of More Spyware Attacks

byDark Reading Staff, Dark Reading

Infostealer concept with male hooded figure agains dark background

Application Security

Attackers Have Been Leveraging Microsoft Zero-Day for 18 Months

Attackers Have Been Leveraging Microsoft Zero-Day for 18 Months

byJai Vijayan, Contributing Writer

Seven hooded figured behind laptops in front of a background of the Russian flag

Сloud Security

Feds Uncover Sprawling, GenAI-Enabled Russian Troll Farm

Feds Uncover Sprawling, GenAI-Enabled Russian Troll Farm

byDark Reading Staff, Dark Reading

Rat with its paw on a concrete curb

Cyberattacks & Data Breaches

Poco RAT Burrows Deep Into Mining Sector

Poco RAT Burrows Deep Into Mining Sector

byElizabeth Montalbano, Contributing Writer

Ultramodern meeting room, cityscape outside window

Vulnerabilities & Threats

Privacy & Security Concerns With AI Meeting Tools

Privacy & Security Concerns With AI Meeting Tools

byRob Sloan, Vice President, Cybersecurity Advocacy, Zscaler

NSA headquarters

Application Security

What's Bugging the NSA? A Vuln in Its 'SkillTree' Training Platform

What's Bugging the NSA? A Vuln in Its 'SkillTree' Training Platform

byNate Nelson, Contributing Writer

Camel at outdoor zoo on a sunny day

Threat Intelligence

Houthi-Aligned APT Targets Mideast Militaries With 'GuardZoo' Spyware

Houthi-Aligned APT Targets Mideast Militaries With 'GuardZoo' Spyware

byNate Nelson, Contributing Writer

"Zero-day exploit" alert icon on display of computer

Application Security

Attackers Already Exploiting Flaws in Microsoft's July Security Update

Attackers Already Exploiting Flaws in Microsoft's July Security Update

byJai Vijayan, Contributing Writer

Anonymous hooded figures in several rows working on laptops with the Chinese red flag overlapping

Endpoint Security

Chinese Threat Group APT40 Exploits N-Day Vulns at Rapid Pace

Chinese Threat Group APT40 Exploits N-Day Vulns at Rapid Pace

byKristina Beek, Associate Editor, Dark Reading

Hood ornament on 1971 Cadillac Eldorado

Endpoint Security

Eldorado Ransomware Cruises Onto the Scene to Target VMware ESXi

Eldorado Ransomware Cruises Onto the Scene to Target VMware ESXi

byNathan Eddy, Contributing Writer

The word "Javascript" in yellow surrounded by other developer-related words in white

Cyberattacks & Data Breaches

Trojanized jQuery Packages Spread via 'Complex' Supply Chain Attack

Trojanized jQuery Packages Spread via 'Complex' Supply Chain Attack

byElizabeth Montalbano, Contributing Writer

Old-fashioned alarm clock

Vulnerabilities & Threats

CISA Takedown of Ivanti Systems Is a Wake-up Call

CISA Takedown of Ivanti Systems Is a Wake-up Call

byCharles Herder, Co-Founder, Badge Inc.

An outdoor sign showing Wi-Fi availability.

Endpoint Security

Apple Geolocation API Exposes Wi-Fi Access Points Worldwide

Apple Geolocation API Exposes Wi-Fi Access Points Worldwide

byNate Nelson, Contributing Writer

Red open padlock among blue closed padlocks; digital background

Deconstructing Security Assumptions to Ensure Future Resilience

Deconstructing Security Assumptions to Ensure Future Resilience

byMaurice Uenuma, Vice President & General Manager, Americas, Blancco

A screen showing technology icons such as keys, 0 and 1, and wireless signal, in hexagons.

Sponsored Content

GenAI-Powered Attacks Change the Game

GenAI-Powered Attacks Change the Game

Hand holding a red telephone handset

Remote Workforce

Euro Vishing Fraudsters Add Physical Intimidation to Arsenal

Euro Vishing Fraudsters Add Physical Intimidation to Arsenal

byNathan Eddy, Contributing Writer

Tofu getting burned on the grill

Any IoT Device Can Be Hacked, Even Grills

Any IoT Device Can Be Hacked, Even Grills

byFahmida Y. Rashid, Managing Editor, Features

Volcano explodes fire into the air

Cyberattacks & Data Breaches

Ransomware Eruption: Novel Locker Malware Flows From ‘Volcano Demon'

Ransomware Eruption: Novel Locker Malware Flows From ‘Volcano Demon'

byElizabeth Montalbano, Contributing Writer

Vulnerabilities & Threats

Friend or Foe? AI's Complicated Role in Cybersecurity

Friend or Foe? AI's Complicated Role in Cybersecurity

byDilip Bachwani, Chief Technology Officer, Qualys

Microscope examining slide of sample with test tubes in background.

Cyberattacks & Data Breaches

South Africa National Healthcare Lab Still Reeling From Ransomware Attack

South Africa Lab Still Reeling From Ransomware Attack

byRobert Lemos, Contributing Writer

A person design modeling on laptop

ICS/OT Security

PTC License Server Bug Needs Immediate Patch Against Critical Flaw

PTC License Server Bug Needs Immediate Patch Against Critical Flaw

byDark Reading Staff, Dark Reading

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.