ArcticRAT Cybercrime Gang Profiles Victim Finances With AI
The Android malware has expanded from focusing on crypto theft to full device control, and the attackers have added advanced analysis of stolen information.
Dark Reading 50
Covers: OT / ICS & Critical InfrastructureThreat Actors & Nation-StateFraud & ScamsAI SecurityCybercrime & Law EnforcementDetection & ResponseSupply Chain & AppSecMalwareZero-Days & ExploitsPhishing & Social Engineering
Attackers in Binance Breach Targeted Known Weakness, Missing Controls
Blockchain complexities, such as attacker-deployed sweepers, hobble security controls designed to limit the damage of an exchange compromise.
Getting Past the Post-Quantum Cryptography Discovery Phase
Most organizations haven't sorted out their cryptographic estate enough to even know where they'd start with post-quantum cryptography (PQC).
Cyber Experts Weigh In: How to Fight Artex & Anti Fox
Cybercriminals using agentic pen-testing tools is a proverbial genie out of the bottle at this point, so enterprises need to get a defense plan in place right away.
Extortion Group Luna Moth Flits Into Law Firms a Second Time
The cybercriminals are retargeting law firms that refused to pay its first ransom, with a social engineering con aimed at stealing Microsoft access tokens.
Inside an AI Attack Against a US Retailer
When hand-typed commands failed to breach a US retailer, the attacker turned to AI-generated scripts, achieving lateral movement in minutes.
Chinese AI Project Scouts Spies in Taiwan Chip Industry
The CCP built a Big Data system to scrape reams of information and learn about individuals abroad, to potentially target and exploit them. Think Alice Huang Lite.
Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise
The package adds public-private cyber responders, an AI-focused team run by the economic ministry, and more leeway to use the government's new active cyber-defense powers.
AIを活用したサイバー攻撃の増加を受け、日本がサイバーセキュリティへの緊急資金拠出を推進
この対策パッケージには、官民合同のサイバー対応チーム、経済省が主導するAI専門チーム、および政府の新たな能動的サイバー防衛権限の行使に関する裁量の拡大が含まれている。
Attackers Say 'Hello' to a Different Scale of Cloud Attack
Researchers dubbed an attack chain "Greeter" after discovering that attackers deliberately covered their trail by leaving "hello" messages in logs.
AI Raises the Stakes for Cyber Resilience
An organization's ability to quickly recover from a business disruption will be a competitive advantage in an era of AI-driven threats and business enablement.
As Test Takers Turn to AI for Answers, Exam Security Must Catch Up
It's hard to detect whether someone is using artificial intelligence (AI) to cheat on IT certification exams, but new tools and processes are emerging to boost trust.
N-able Takes N-central Platform Offline After Discovery of 33 Flaws
The RMM provider also released a hotfix as a recommended mitigation to address public exploits for the alleged zero-days, which allow for attacker takeover.
November Patch Tuesday: An Overflowing Cornucopia of CVEs
Microsoft serves up an actively exploited Outlook zero-day, and a wave of critical Exchange, SharePoint, Windows Search, and LDAP bugs that exhausted defenders need to prioritize fast.
Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon
Forks of the open source Artex framework, along with 45 similar pen-testing tools, remain capable of executing credential attacks and cloud breaches at machine speed across multiple industries.
F-Secure Identifies 26 Ways AI Can Harm Consumers, and Where to Stop Them
New AI Harms Taxonomy traces how harm moves through AI systems, from misleading chatbot answers to compromised autonomous agents, and identifies where defenses can intervene.
Checkmarx Appoints Kobi Sivilya as Chief Information Security Officer
Sivilya brings deep cybersecurity and technology leadership to Checkmarx as AI transforms software development.
How to Assess OT Incident Response Preparedness
Cloud Range's free 28-question OT Cyber Readiness Assessment helps organizations identify gaps in operational technology (OT) incident response.
AI Coding Agents Leak Thousands of Secrets to GitHub
A command in Claude Code inadvertently saves files with credentials and other sensitive data to public Git repositories, creating security gaps for organizations.
AI Makes Reverse Engineering Mainstream Software & Malware Far Easier
Researchers unpacked, mapped, and recreated complex software and the Turla malware, raising opportunities and concerns for organizations and cybersecurity analysts.
People Are Getting Weird About AI
Dark Reading Confidential Episode 22: You can love AI without being blind to cybersecurity being sacrificed for utility. The tendency for humans to anthropomorphize the conversations and interactions we're having with AI is growing into potential delusion.
CISA Announces Enhanced Reporting Form for Cyber Incidents
New questionnaire captures critical data and information that improves the agency’s ability to assess incidents, identify trends and prioritize response actions.
Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion
Last month, Microsoft disclosed a vulnerability in Microsoft Paint, but messaging regarding a patch was unclear.
Black Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to India
Inaugural edition by Informa Markets in India brings together leading researchers, security practitioners and industry decision makers for four days of cutting-edge research, technical exchange and strategic dialogue.
Attackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on Linux
Attackers can exploit a flaw in Claude's document-processing tool by creating a temporary file that Anthropic's AI assistant can access and run on a user's machine.
PwC's CISO on AI, Robots & What's Next for Security
As AI accelerates change across the enterprise, PwC's James Shira explains why security teams must rethink their approach to risk and adapt their strategies.
NIST: Solo Shouldn't Mean Less Secure
New guidance provides a basic framework for less-technical solo business owners, but it may miss the mark on how to secure technology that requires no human oversight.
UK Wades Into Tech Sovereignty Amid AI Policy Changes
The UK is betting on domestic AI and cyber investment to reduce reliance on US tech — but security leaders question whether the funding is too fragmented and too late.
AI Gave Your Incident Archive a Second Job
Security records are increasingly being used by vendors to train their models, creating new risks for enterprises.
Why Europe's Freezer Hacks Spread So Far, So Fast
Europe's supermarket freezer hacks show how security issues can cascade across an industry, disrupting supply chains at scale.