On Wednesday I spent a day fishing, on a small boat out of Gloucester, MA. We caught many cod (none of which we could keep), and a bunch of hake and mackerel (all of which we could keep). And…I caught a squid!
Welcome to another gangbuster year for strategic M&A activity in cyber, with 117 deals announced in the latest quarter. What’s different: Many of the buyers are not your typical cybersecurity firms.
Tokens transmitted in metadata, weak VM isolation, and expansive permissions make hacking a lot easier
Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories.
It looks like you’re buying a Clippy desk accessory without getting caught in a crypto scam. Would you like help? Oh yes, Microsoft’s iconic mascot is back.
With Roblox scammers once again in the news, we asked our security pro what’s the best way to protect email, social, and gaming accounts.
An indictment says Zohar Pinhasi’s MonsterCloud billed ransomware victims millions for a decryptor it did not have, then paid the attackers a fraction of that fee.
The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X. ShinyHunters is the extortion group that said in September it had breached the FBI’s jobs portal and stolen sensitive data on almost all FBI agents and job applicants.
In this video conversation, Dark Reading editors discuss some of the news they didn’t get a chance to cover, from the arrest of a suspected ShinyHunters operative to the compromise of a Pentagon-run data center.
Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners.
The FBI has arrested another suspected member of the ShinyHunters extortion group believed to be involved in the recent breach of FBI systems, Director Kash Patel announced Friday.
iPhone’ları hedef alan P7 DarkSword casus yazılımı ortaya çıktı. Yeni sürüm, zararlı reklamlarla yayılıyor; parolaları, fotoğrafları ve notları hedef alıyor.
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword.
Those closest to executives must match their security postures because the weakest link in a family becomes the entry point for attacks.
Germany has arrested a Russian national suspected of being a leading member of the Qilin ransomware group following extradition from Japan earlier this month.
Should we be thinking more critically about letting devices get connected?
Sungrow’un iSolarCloud platformunda parolayı olmadan kullanıcı hesaplarına erişilmesine imkan tanıyan kritik bir güvenlik açığı bulundu. Şirket, açığı kısa sürede kapattı.
Flock would not say if CEO Garrett Langley would take a pay cut following the reduction in workforce.
Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that gives attackers root access before anyone approves the connection.
Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI). “It’s an opt-in service informed by our experience using Claude to find vulnerabilities during Project Glasswing,” Anthropic said.
Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners.
Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon.
72 aktif kaynak
27 Türkçe · 45 İngilizce
Tüm kaynaklar
