News · Dark Reading

• 
  Dark Reading 4 h ago

  Attacker Relentlessly Scans for Credentials by Impersonating AI Bots

  The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.
• 
  Dark Reading 13 h ago

  Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature

  Interpol's annual Operation Serengeti, now in its third iteration, led to 1,462 arrests across 20 African countries and the US, recovering $105 million in stolen funds.
• 
  Dark Reading 22 h ago

  3 Frameworks to Protect CISOs & Orgs Against AI Liability

  Cyber leaders can get ahead of AI liability with rigorous documentation, transparency, and smart contract negotiations with AI vendors.
• 
  Dark Reading 22 h ago

  External Teams Chats Anchor 15-Minute Malware Delivery

  Mail bombing is getting a new look with a wide-scale, ongoing social engineering campaign that might be tied to the Black Basta ransomware gang.
• 
  Dark Reading 23 h ago

  SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack

  A recent Shai-Hulud attack shows defenders need real-time visibility into production code and affected services to respond to supply chain compromises.
• 
  Dark Reading Tue 27 Oct

  Beware the Slasher: AI Could Kill Off Cybersecurity Pros' Skills

  Nathan Hamiel outlines potential SecOps horror in the AI midst, as core technical capabilities go the way of reading an atlas or remembering phone numbers.
• 
  Dark Reading Tue 27 Oct

  'Aokigahara' Stealer Targets 'Developer Keyrings' & AI Assistants

  The malware's focus on AI tools expands the traditional infostealer playbook to expose a forest of AI sessions, sensitive business data, and developer infrastructure from a single compromised endpoint.
• 
  Dark Reading Tue 27 Oct

  So Many AI Security Benchmarks, But None Tell the Whole Story

  Measuring AI model security gets complex, fast, thanks to a growing patchwork of benchmarks targeting different variables in the equation. But none replace testing against your own code and workflows.
• 
  Dark Reading Mon 26 Oct

  Risks & Rewards: How AI Is Redefining the CISO's Role

  Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks.
• 
  Dark Reading Mon 26 Oct

  In-the-Wild Attack Abuses AI Agents' Trust in Markdown

  A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions.
• 
  Dark Reading Mon 26 Oct

  'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets

  An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.
• 
  Dark Reading Mon 26 Oct

  10 Software Security Practices Built for the Next 250 Years

  This Cybersecurity Awareness Month's theme, "Securing the Next 250," asks us to look beyond vulnerabilities and consider what will make our digital systems resilient for generations.
• 
  Dark Reading Fri 23 Oct

  Trust Is Not What It Seems — and Fraudsters Are Counting on It

  Threat actors don't need to rely on malware to breach organizations anymore. They're simply calling help desks and politely asking for access, with a little help from artificial intelligence.
• 
  Dark Reading Fri 23 Oct

  Exposed to PHP2Shell? Cyber Experts Weigh in With Advice

  Fixing the critical PHP flaws is not as simple as clicking "Update." Here's how to assess your risk, and what you can do to protect yourself.
• 
  Dark Reading Fri 23 Oct

  AI Tools Are Generating Massive Attacks for Little Cost

  One campaign targets 105 sites using open-weight models; in another, public models gained full domain control for $12. Cyber-defense will have to change.
• 
  Dark Reading Fri 23 Oct

  Why Caribbean Threats Cascade Into Global Cyber-Risk

  The region is demonstrating what happens when exploits accelerate but assurance does not.
• 
  Dark Reading Fri 23 Oct

  Cyber Insurance's New Reality: Underwriting Isn't Enough

  Rising AI, social engineering, and cloud risks are pushing carriers beyond risk transfer and deeper into cybersecurity itself.
• 
  Dark Reading Fri 23 Oct

  AI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security Stack

  Microsoft's Project Perception adds Guardian Agents to monitor and contain anomalous AI agents, but experts warn that policing unpredictable agents with other agents may compound — not contain — the risk.
• 
  Dark Reading Fri 23 Oct

  State Bank of India Suffers a Customer PII Data Leak

  Relatively small data breaches in India can turn quite serious, thanks to a sophisticated underground market for trading PII.
• 
  Dark Reading Thu 22 Oct

  Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack

  The China-linked actor used an AI-enabled penetration-testing tool to automate and accelerate its attack on more than 2,200 tenants.
• 
  Dark Reading Thu 22 Oct

  What We Missed: Feds Lasso Texas Laptop Farms

  In this video, Dark Reading editors discuss some of the news they didn't get a chance to cover, from busting up North Korea's stateside infrastructure in "Operation Lonestar Justice" to Staples' gift card bonanza.
• 
  Dark Reading Thu 22 Oct

  Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour

  Des centaines de magasins ont subi des pertes se chiffrant en millions d'euros parce qu'ils avaient fait appel à des tiers pour gérer le micrologiciel OT obsolète qui pilotait leurs systèmes de climatisation.
• 
  Dark Reading Thu 22 Oct

  As AI Risks Grow, Insurers Split on Covering the Damage

  Some build specialized agentic AI coverage, while major carriers quietly exclude it — leaving enterprises exposed without their knowledge.
• 
  Dark Reading Thu 22 Oct

  UAE Transitions 50% of Government Services to Agentic AI

  The United Arab Emirates says it's creating a foundation of security and safety as it transforms its public service footprint.
• 
  Dark Reading Wed 21 Oct

  TiDB Breach Exposes Flawed Cloud Security Assumptions

  Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the unseen information comes to light.
• 
  Dark Reading Wed 21 Oct

  Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security

  The effort is aimed at standardizing a NIST FIPS 140-3 Level 3 integrated HSM for cloud and hyperscale data center infrastructure.
• Dark Reading Wed 21 Oct

  Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens

  Research finds that, among respondents experiencing data loss, only 16% said DLP blocked their most significant incidents before data left the organization.
• 
  Dark Reading Wed 21 Oct

  'PHP2Shell' Bugs Signal Red Alert for Security Industry

  Security teams are scrambling to remediate two critical PHP vulnerabilities following leaked details and reports of exploitation attempts.
• 
  Dark Reading 21 Oct

  OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors

  A developer's GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users.
• 
  Dark Reading 21 Oct

  Optiv Launches CyberBOT Cybersecurity Awareness Training Program

  Hands-on sessions provide educators, nonprofits, and community leaders with an accessible resource to foster year-round cyber awareness and build more resilient communities.
• 
  Dark Reading 21 Oct

  Survey Finds High-Profile Executives Feel Untouchable as Digital Exposure Turns Into Physical Risk

  360 Privacy finds more than 8 in 10 security and wealth professionals say cybersecurity and physical security can no longer be separated.
• 
  Dark Reading 21 Oct

  Decades-Old Windows Utility Powers Modern ClickFix Attack

  The attack uses malicious Google search results related to Amazon and leverages the "finger" utility to launch a CAPTCHA that installs malware, including the Lumma stealer.
• 
  Dark Reading 20 Oct

  Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys

  Google, Mozilla, Apple, the Go project and others moved swiftly to block the affected certificates from the Indian CA, though it's unclear how the keys were compromised.
• 
  Dark Reading 20 Oct

  Ex-OpenAI Engineer Detained After Planting Secret Recorder at HQ

  The perp, who has Saudi ties, was arrested for allegedly bugging an OpenAI conference room, highlighting a preventable insider threat vector.
• 
  Dark Reading 20 Oct

  Close Identity Gaps in Software Development Before Unleashing AI

  Artificial intelligence is complicating security in the software development life cycle, but a Dark Reading roundtable found collaboration, better identity visibility, and reduced testing costs offer CISOs a way ahead.
• 
  Dark Reading 20 Oct

  Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree

  A Chinese-speaking attacker has compromised hundreds of websites across the globe, looting from big fish like John Deere, SharkNinja, and engine manufacturer Cummins.
• 
  Dark Reading 19 Oct

  Researchers Infiltrate Microsoft Tech Support Scam Operation

  A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands of Cloudflare links.
• 
  Dark Reading 19 Oct

  'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery

  Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest.
• 
  Dark Reading 19 Oct

  ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs

  Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials; ConnectWise says customer impact remains unconfirmed.
• Dark Reading 19 Oct

  OnlyFans Copyright Takedowns Expose Compromised Websites

  Copyright takedown requests tied to OnlyFans and other adult content creators are revealing how attackers exploit vulnerable university and government websites to manipulate search results. UpGuard's Greg Pollock explains what universities, government websites, and security teams need to think about next.
• Dark Reading 19 Oct

  The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience

  An industry-wide, laser focus on vulnerabilities has left cybersecurity teams without enough room to strategize for resilience.
• Dark Reading 16 Oct

  BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs

  Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
• Dark Reading 16 Oct

  Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk

  Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.
• Dark Reading 16 Oct

  Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform

  The launch follows the acquisition of catalog's assets and the appointment of Laurent Guengant as CEO earlier this year.
• Dark Reading 16 Oct

  Enterprise AI Enters Risk Management Phase as Security Concerns Rise

  Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution.
• Dark Reading 16 Oct

  AI Takes Control of Robotic Arm in 16 Minutes Flat

  Most OT devices at utilities, factories, and elsewhere have been deployed for a decade or more, but operators need to get agile and deploy new cyber defenses.
• Dark Reading 16 Oct

  When Your Ransomware Negotiator Works for the Other Side

  The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight.
• Dark Reading 16 Oct

  When AI Agents Commit Breaches, Humans May Not Be Held Liable

  As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.
• Dark Reading 15 Oct

  SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape

  The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks, drawing record attendance and marking 22% growth.
• Dark Reading 15 Oct

  F-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Types of Consumer Fraud

  Built from decades of threat intelligence research, the new resource explains scams from the victims' perspective and tracks emerging forms of cyber crime.

Older