Security News

darkreading Dec 29, 2025 at 14:51

SBOMs in 2026: Some Love, Some Hate, Much Ambivalence

With a new year upon us, software and cybersecurity experts disagree on the utility of software bill of materials — in theory, SBOMs are great, but in practice, they're a mess.

Read Article

darkreading Dec 29, 2025 at 14:00

5 Threats That Defined Security in 2025

2025 included a number of monumental threats, from the global attacks of Salt Typhoon to dangerous vulnerabilities like React2Shell.

Read Article

darkreading Dec 26, 2025 at 15:15

Mentorship and Diversity: Shaping the Next Generation of Cyber Experts

Patricia Voight, CISO at Webster Bank, shares her expertise on advancing cybersecurity careers, combating financial crimes, and championing diversity in a rapidly changing industry.

Read Article

darkreading Dec 26, 2025 at 13:04

As More Coders Adopt AI Agents, Security Pitfalls Lurk in 2026

Developers are leaning more heavily on AI for code generation, but in 2026, the development pipeline and security need to be prioritized.

Read Article

darkreading Dec 26, 2025 at 12:00

Dark Reading Opens The State of Application Security Survey

Take part in the new survey from Dark Reading and help uncover trends, challenges, and solutions shaping the future of application security.

Read Article

darkreading Dec 23, 2025 at 20:22

Industry Continues to Push Back on HIPAA Security Rule Overhaul

Healthcare cyberattacks are on the rise, but industry organizations say the proposed changes to the security rules fall short of what's needed.

Read Article

darkreading Dec 23, 2025 at 20:03

ServiceNow Buys Armis for $7.75B, Boosts 'AI Control Tower'

Its latest cybersecurity acquisition will help further ServiceNow's plans for autonomous cybersecurity, and building a security stack to proactively manage AI.

Read Article

darkreading Dec 23, 2025 at 17:42

Amazon Fends Off 1,800 Suspected DPRK IT Job Scammers

The tech giant has been beset by a deluge of state-sponsored North Korean operatives, showcasing the sheer scale of the IT worker scam problem.

Read Article

darkreading Dec 23, 2025 at 17:16

Sprawling 'Operation Sentinel' Neutralizes African Cybercrime Syndicates

Interpol said law enforcement across 19 countries made 574 arrests and recovered $3 million, against a backdrop of spiraling cybercrime in the region, including business email compromise, digital extortion, and ransomware schemes.

Read Article

darkreading Dec 22, 2025 at 20:29

Threat Actors Exploit Zero-Day in WatchGuard Firebox Devices

With attacks on the critical firewall vulnerability, WatchGuard joins a list of edge device vendors whose products have been targeted in recent weeks.

Read Article

darkreading Dec 22, 2025 at 17:07

Uzbek Users Under Attack by Android SMS-Stealers

Telegram users in Uzbekistan are being targeted with Android SMS-stealer malware, and what's worse, the attackers are improving their methods.

Read Article

darkreading Dec 19, 2025 at 20:05

Cisco VPNs, Email Services Hit in Separate Threat Campaigns

The company suffered one sophisticated five-alarm campaign and one messy spray-and-pray attack, mere days apart.

Read Article

darkreading Dec 19, 2025 at 16:38

LongNosedGoblin Caught Snooping on Asian Governments

New China-aligned APT group is deploying Group Policy to sniff through government networks across Southeast Asia and Japan.

Read Article

darkreading Dec 19, 2025 at 15:04

Identity Fraud Among Home-Care Workers Puts Patients at Risk

Reports of patients being cared for by unqualified home-care aides with fake identities continue to emerge, highlighting a need for more stringent identity authentication.

Read Article

darkreading Dec 19, 2025 at 14:00

A Cybersecurity Playbook for AI Adoption

AI adds real value to cybersecurity today, but it cannot yet serve as a single security guardian. Here's how organizations can safely combine AI-driven analysis with deterministic rules and proven security practices.

Read Article

darkreading Dec 19, 2025 at 14:00

A Good Year for North Korean Cybercriminals

North Korea shifted its strategy to patiently target "bigger fish" for larger payouts, using sophisticated methods to execute attacks at opportune times.

Read Article

darkreading Dec 18, 2025 at 22:25

SonicWall Edge Access Devices Hit by Zero-Day Attacks

In the latest attacks against the vendor's SMA1000 devices, threat actors have chained a new zero-day flaw with a critical vulnerability disclosed earlier this year.

Read Article

darkreading Dec 18, 2025 at 18:55

Dark Reading Confidential: Stop Secrets Creep Across Developer Platforms

Dark Reading Confidential Episode 13: Developers are exposing their organizations' most sensitive information; our guests explain why it's happening and how to stop it.

Read Article

darkreading Dec 18, 2025 at 13:00

Dormant Iran APT is Still Alive, Spying on Dissidents

"Prince of Persia" has rewritten the rules of persistence with advanced operational security and cryptographic communication with its command-and-control server.

Read Article

darkreading Dec 17, 2025 at 22:44

Critical Fortinet Flaws Under Active Attack

Attackers are targeting admin accounts, and once authenticated, exporting device configurations including hashed credentials and other sensitive information.

Read Article