Dark Reading Nov 4, 9:48 PM

Critical Rails Bug Threatens to Derail Vulnerable Servers

An attacker could write arbitrary files and read sensitive files via images uploaded to the Rails Active Storage ImageMagick integration, possibly positionin...

1 min read Read

Dark Reading Nov 4, 4:24 PM

Google, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet

Google alleges that Android device manufacturer Videostrong ran the operation, which infected set-top boxes and IoT devices with a backdoor to create infrast...

1 min read Read

Dark Reading Nov 4, 2:00 AM

Philippine Migrant Worker Data Likely Leaked in 69GB Government Breach

An unknown operator appears to have exfiltrated SQL Server backups from the Philippine Overseas Employment Administration in under a half hour.

1 min read Read

Dark Reading Nov 4, 1:05 AM

Phishing-Resistant Isn't Enough; Yubico Takes Aim at Identity-Verification Gap

The new YubiID service bridges identity verification with credential enrollment and recovery across existing identity platforms, closing a phishing-resistant...

1 min read Read

Dark Reading Nov 2, 10:27 PM

One Compromised Laptop, Billions Lost: The Binance Attack-Path Warning

The record theft shows how weak system separation, inadequate controls, and untested attack possibilities can turn one breach into systemic loss.

1 min read Read

Dark Reading Oct 30, 9:08 PM

Investors Dish on New Startups & What They'd Back Next

The cybersecurity market is difficult to predict, but a glimpse into the annual DataTribe Challenge shows what's trending and what's not.

1 min read Read

Dark Reading Oct 29, 9:21 PM

Anthropic-Themed Phishing Emails Bypass Top Security Tools

Obvious phishing emails with numerous red flags are somehow getting past some of the industry-leading secure email gateway (SEG) products.

1 min read Read

Dark Reading Oct 29, 8:15 PM

Rethinking Cybersecurity Awareness in the AI Era

This installment of the Reporters' Notebook video series discusses some of the trends and topics from Cybersecurity Awareness Month, from using AI for better...

1 min read Read

Dark Reading Oct 28, 7:39 PM

GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub

The supply chain attack campaign's shift toward developer endpoints and cloud access signals what could be next for the cybercrime outfit.

1 min read Read

Dark Reading Oct 28, 3:29 PM

AI Takes Root in Hospital Corridors, Raises Security Stakes

Artificial intelligence is everywhere in healthcare, from doctors' intake forms to cancer screenings. But in some cases, life-and-death uses are outpacing cy...

1 min read Read

Dark Reading Oct 28, 2:37 PM

Attacker Relentlessly Scans for Credentials by Impersonating AI Bots

The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.

1 min read Read

Dark Reading Oct 27, 8:42 PM

External Teams Chats Anchor 15-Minute Malware Delivery

Mail bombing is getting a new look with a wide-scale, ongoing social engineering campaign that might be tied to the Black Basta ransomware gang.

1 min read Read