▣ IT SECURITY · — · rss

Dark Reading

Fetch interval: 12h

Items

180

Trust

60/100

Last activity

7/10/2026

Open original site ↗RSS ↗

Iran's Cyber Crosshairs Focus Beyond Critical Infrastructure

Obscurity isn't a defense. If your company has any Internet-facing vulnerability, you're at risk from multiple threats.

cybersecurity · government-security · regulation

Dark Reading8h07/09

Microsoft Reins in RoguePlanet Zero-Day Threat

The researcher known as "Nightmare-Eclipse" published a proof-of-concept (PoC) exploit for the Windows Defender vulnerability in early June after dropping several other Microsoft zero-days.

cybersecurity · government-security · regulation

Dark Reading9h07/09

AI Agents Are a New Kind of Identity & Most Organizations Aren't Ready

If you're handling them like a service account or API token, consider yourself behind. AI agents need a fundamentally different approach.

cybersecurity · government-security · regulation

Dark Reading13h07/09

As Global Conflicts Go Digital, Businesses Need Wartime Gameplans

The fate of a Ukrainian tax software company shows how modern cyberwarfare can claim casualties far beyond the battlefield, and how businesses across the ocean still need to protect themselves.

borderlinecybersecurity · government-security · regulation

Dark Reading15h07/09

AI Gateways Offer Attackers the Keys to the Kingdom

A cryptomining incident highlights how AI gateways can provide access to AI models, cloud infrastructure, and identity and access management (IAM) data.

cybersecurity · government-security · regulation

Dark Reading18h07/09

'GodDamn' Ransomware Uses BYOVD to Smite US Companies

Microsoft co-signed a malicious kernel driver, and now it's being used to kill security software in ransomware attacks.

cybersecurity · government-security · regulation

Dark Reading20h07/09

European Organizations Have a Collaboration Security Confidence Gap

A new survey shows security leaders have an inflated sense of safety regarding their collaboration tools and platforms.

borderlinecybersecurity · government-security · regulation

Dark Reading1d07/08

Mexico's New Cyber Plan Faces Its First Real Test

The Latin American nation's cybersecurity plan — still in the expansion phase — has to survive its own knockout round during the FIFA World Cup.

borderlinecybersecurity · government-security · regulation

Dark Reading1d07/08

Lone Attacker Uses AI to Breach AWS Cloud Environment in 72 Hours

The attacker exploited AI workflows, chained cloud weaknesses, and stolen credentials to extort a large Amazon customer.

cybersecurity · government-security · regulation

Dark Reading1d07/08

Vidar Infostealer Hammers SMBs via Malvertising Campaign

A financially motivated operation uses lures of cracked or pirated software to deliver a malware two-for-one combo for data theft and cryptomining.

cybersecurity · government-security · regulation

Dark Reading2d07/08

State IDs for AI Agents: Will Estonia Set a Precedent?

The world's digital testing ground plans to help people use AI agents for government purposes.

cybersecurity · government-security · regulation

Dark Reading2d07/07

Big Brand Jobs Scam Targets Marketing Pros' Google Accounts

The phishing campaign uses several tactics, including nested redirects, to evade detection and steal credentials from unsuspecting targets.

cybersecurity · government-security · regulation

Dark Reading2d07/07

Dialogflow CX 'Rogue Agent' Flaw Enabled AI Chatbot Data Theft

Varonis reported the flaw to Google in late 2025 and it has been addressed, but it reminds defenders to take a fresh look at their AI Infrastructure security.

cybersecurity · government-security · regulation

Dark Reading3d07/07

'GitLost' Flaw Leaks Private Data From GitHub's Agentic Workflows

The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data from its private repos, too.

cybersecurity · government-security · regulation

Dark Reading3d07/06

'BusySnake' Infostealer Slithers into Critical Infrastructure Networks

A threat group researchers call "Armored Likho" has gained access to government agencies and electrical power entities in Russia, Brazil, and Kazakhstan.

borderlinecybersecurity · government-security · regulation

Dark Reading3d07/06

CitrixBleed-ing Again? NetScaler Vulnerability Under Attack

Attackers wasted little time targeting the latest memory disclosure flaw in Citrix's NetScaler products, after researchers published a proof-of-concept exploit (PoC).

cybersecurity · government-security · regulation

Dark Reading3d07/06

JadePuffer: The First Complete LLM-Driven Ransomware Attack

An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt other systems.

cybersecurity · government-security · regulation

Dark Reading7d07/03

Chinese LLMs Broaden the Gap Between Attackers & Defenders

Two new models from Chinese firms compete with top US mainstream and frontier models. Should cyber-defenders be worried?

borderlinecybersecurity · government-security · regulation

Dark Reading7d07/02

Aussies Face Reduced Cybercrime Risk, as Pressure Shifts to SMBs

Improved institutional safeguards and stricter regulations have pushed the burdens of protection and risk reduction on to Australian businesses.

borderlinecybersecurity · government-security · regulation

Dark Reading7d07/02

Apple Reverses Age-Old Patch Policy to Keep Up With AI

Expect more compressed patching cycles from Apple going forward, as attackers leverage artificial intelligence to reduce time to exploit.

cybersecurity · government-security · regulation

Dark Reading7d07/02

FortiBleed Actors Collaborating With Inc, Lynx Ransomware Gangs

After gaining a foothold in thousands of Fortinet firewalls, the attackers are starting to monetize that access, and are also piling on a Nextcloud zero-day bug.

cybersecurity · government-security · regulation

Dark Reading7d07/02

Ransomware Thugs Masquerade as Interpol to Entice Small Biz

The ransomware campaign relies on basic social engineering and stretches across multiple regions, including the US, Europe, Middle East, and elsewhere.

cybersecurity · government-security · regulation

Dark Reading8d07/02

Anthropic's AI Finds Bugs. IBM Bets $5B It Can Fix Them.

IBM and Red Hat assign 20,000 engineers to the new Project Lightwell service as Anthropic's Mythos findings ignite debate over how to secure the open-source software supply chain.

cybersecurity · government-security · regulation

Dark Reading8d07/01

Crafty Phishing Campaigns Auto-Adapt to Victim's Device, OS

Attackers fingerprint victims through user-agent data to deliver OS-specific payloads, increasing compromise rates and campaign profitability.

cybersecurity · government-security · regulation

Dark Reading8d07/01

And the Winner in Dominant Malware Delivery? ClickFix

Researchers say the highly effective social engineering technique is no longer the exception for malware attacks — it's now the rule.

cybersecurity · government-security · regulation

Dark Reading9d07/01

When Too Much Security Data Became the Risk

Rapid growth turned routine firewall logs into a security and budget liability. One CISO used artificial intelligence to filter what data truly belongs in the SIEM.

cybersecurity · government-security · regulation

Dark Reading9d07/01

'Phantom Squatting': An Emerging AI-Driven Supply Chain Threat

LLMs consistently hallucinate Web domains for legitimate brands that attackers can register for malicious activity in a difficult-to-detect attack vector.

cybersecurity · government-security · regulation

Dark Reading9d07/01

Safe Events Start With Threat Intel and Digital Security

Planning ahead to defend against cyber threats is the work that keeps events uneventful.

borderlinecybersecurity · government-security · regulation

Dark Reading9d07/01

China-Linked Group Targets Southeast Asia Critical Systems

The group compromised at least 10 regional organizations, including two state-owned entities, and deployed a new backdoor.

cybersecurity · government-security · regulation

Dark Reading9d06/30

Fake Bug Report Hijacks AI Coding Agents at Scale

"Agentjacking" is the latest demonstration of how easily attackers can exploit an AI agent's inability to differentiate between content and instructions.

cybersecurity · government-security · regulation

Trust

Media· 60/100

Recent crawls

5/24/26, 12:43 AM	ok	0/50
5/24/26, 12:43 AM	ok	0/50
5/23/26, 11:10 PM	ok	5/50
5/23/26, 11:10 PM	ok	5/50
5/23/26, 11:02 PM	error	0/0
5/23/26, 11:02 PM	error	0/0
5/23/26, 12:42 PM	error	0/0
5/23/26, 12:42 PM	error	0/0
5/23/26, 6:54 AM	error	0/0
5/23/26, 6:54 AM	error	0/0

Health checks

7/10/26, 3:23 AMOK312 ms

7/10/26, 2:23 AMOK300 ms

7/10/26, 1:23 AMOK372 ms

7/10/26, 12:23 AMOK400 ms

7/9/26, 11:23 PMOK286 ms

7/9/26, 10:23 PMOK812 ms

7/9/26, 9:23 PMOK486 ms

7/9/26, 8:23 PMOK405 ms

7/9/26, 7:23 PMOK675 ms

7/9/26, 6:23 PMOK371 ms

7/9/26, 5:23 PMOK605 ms

7/9/26, 4:23 PMOK435 ms

7/9/26, 3:23 PMOK387 ms

7/9/26, 2:23 PMERR65 ms

7/9/26, 1:23 PMOK389 ms

7/9/26, 12:23 PMOK452 ms

7/9/26, 11:23 AMOK39 ms

7/9/26, 10:24 AMOK437 ms

7/9/26, 9:23 AMOK151 ms

7/9/26, 8:23 AMOK205 ms

7/9/26, 7:23 AMOK421 ms

7/9/26, 6:23 AMOK447 ms

7/9/26, 5:23 AMOK730 ms

7/9/26, 4:23 AMOK433 ms

7/9/26, 3:23 AMOK371 ms

7/9/26, 2:23 AMOK555 ms

7/9/26, 1:23 AMOK655 ms

7/9/26, 12:23 AMOK455 ms

7/8/26, 11:23 PMOK446 ms

7/8/26, 10:23 PMOK374 ms

Iran's Cyber Crosshairs Focus Beyond Critical Infrastructure

Microsoft Reins in RoguePlanet Zero-Day Threat

AI Agents Are a New Kind of Identity &amp; Most Organizations Aren't Ready

As Global Conflicts Go Digital, Businesses Need Wartime Gameplans

AI Gateways Offer Attackers the Keys to the Kingdom

'GodDamn' Ransomware Uses BYOVD to Smite US Companies

European Organizations Have a Collaboration Security Confidence Gap

Mexico's New Cyber Plan Faces Its First Real Test

Lone Attacker Uses AI to Breach AWS Cloud Environment in 72 Hours

Vidar Infostealer Hammers SMBs via Malvertising Campaign

State IDs for AI Agents: Will Estonia Set a Precedent?

Big Brand Jobs Scam Targets Marketing Pros' Google Accounts

Dialogflow CX 'Rogue Agent' Flaw Enabled AI Chatbot Data Theft

'GitLost' Flaw Leaks Private Data From GitHub's Agentic Workflows

'BusySnake' Infostealer Slithers into Critical Infrastructure Networks

CitrixBleed-ing Again? NetScaler Vulnerability Under Attack

JadePuffer: The First Complete LLM-Driven Ransomware Attack

Chinese LLMs Broaden the Gap Between Attackers &amp; Defenders

Aussies Face Reduced Cybercrime Risk, as Pressure Shifts to SMBs

Apple Reverses Age-Old Patch Policy to Keep Up With AI

FortiBleed Actors Collaborating With Inc, Lynx Ransomware Gangs

Ransomware Thugs Masquerade as Interpol to Entice Small Biz

Anthropic's AI Finds Bugs. IBM Bets $5B It Can Fix Them.

Crafty Phishing Campaigns Auto-Adapt to Victim's Device, OS

And the Winner in Dominant Malware Delivery? ClickFix

When Too Much Security Data Became the Risk

'Phantom Squatting': An Emerging AI-Driven Supply Chain Threat

Safe Events Start With Threat Intel and Digital Security

China-Linked Group Targets Southeast Asia Critical Systems

Fake Bug Report Hijacks AI Coding Agents at Scale

AI Agents Are a New Kind of Identity & Most Organizations Aren't Ready

Chinese LLMs Broaden the Gap Between Attackers & Defenders