Security News

darkreading Jan 14, 2026 at 21:19

Retail, Services Industries Under Fire in Oceania

Last year in Australia, New Zealand, and the South Pacific, Main Street businesses like retail and construction suffered more cyberattacks than their critical sector counterparts.

Read Article

darkreading Jan 14, 2026 at 19:07

Microsoft Disrupts Cybercrime Service RedVDS

RedVDS, a cybercrime-as-a-service operation that has stolen millions from victims, lost two domains to a law enforcement operation.

Read Article

darkreading Jan 14, 2026 at 15:59

'VoidLink' Malware Poses Advanced Threat to Linux Systems

Researchers discovered a modular, "cloud-first" framework that is feature-rich and designed to maintain stealthy, long-term access to Linux environments.

Read Article

darkreading Jan 14, 2026 at 02:00

Taiwan Endures Greater Cyber Pressure From China

Chinese cyberattacks on Taiwan's critical infrastructure — including energy utilities and hospitals — rose 6% in 2025, averaging 2.63 million attacks a day.

Read Article

darkreading Jan 13, 2026 at 23:59

CrowdStrike to Buy Seraphic Security in Bid to Boost Browser Security

The browser protection and detection technology will be integrated into CrowdStrike's Falcon platform to protect endpoints, browser sessions, and cloud applications.

Read Article

darkreading Jan 13, 2026 at 23:45

CISO Succession Crisis Highlights How Turnover Amplifies Security Risks

When cybersecurity leadership turns over too fast, risk does not reset. It compounds.

Read Article

darkreading Jan 13, 2026 at 21:44

'Most Severe AI Vulnerability to Date' Hits ServiceNow

The ITSM giant tacked agentic AI onto a largely unguarded legacy chatbot, exposing customers' data and connected systems.

Read Article

darkreading Jan 13, 2026 at 21:11

Microsoft Starts 2026 With a Bang: A Freshly Exploited Zero-Day

The vendor's first Patch Tuesday of the year also contains fixes for 112 CVEs, nearly double the amount from last month.

Read Article

darkreading Jan 13, 2026 at 17:46

Shadow#Reactor Uses Text Files to Deliver Remcos RAT

Attackers use a sophisticated delivery mechanism of text-only files for RAT deployment, showcasing a clever way to bypass defensive tools and rely on the target's own utilities.

Read Article

darkreading Jan 13, 2026 at 14:58

AsyncRAT Malware Infests Orgs via Python & Cloudflare

The phishing campaign shows how attackers continue to weaponize legitimate cloud services and open source tools to evade detection and gain trust.

Read Article

darkreading Jan 12, 2026 at 22:01

BreachForums Breached, Exposing 324K Cybercriminals

A massive data dump reveals real identities and details of administrators and members of the notorious hacker forum.

Read Article

darkreading Jan 12, 2026 at 21:19

Multipurpose GoBruteforcer Botnet Targets 50K+ Linux Servers

Researchers detailed a souped-up version of the GoBruteforcer botnet that preys on servers with weak credentials and AI-generated configurations.

Read Article

darkreading Jan 09, 2026 at 22:08

Deepfake Fraud Tools Are Lagging Behind Expectations

Deepfakes are becoming more realistic and more popular. Luckily, defenders are still ahead in the arms race.

Read Article

darkreading Jan 09, 2026 at 16:56

Illicit Crypto Economy Surges as Nation-States Join in the Fray

Cybercriminal cryptocurrency transactions totaled billions in 2025, with activity from sanctioned countries like Russia and Iran causing the largest jump.

Read Article

darkreading Jan 09, 2026 at 07:00

Russia’s Fancy Bear APT Doubles Down on Global Secrets Theft

The notorious Russian state-sponsored group relies on basic techniques that are highly effective, often delivering greater ROI than more complex malware-heavy operations.

Read Article

darkreading Jan 08, 2026 at 23:37

CrowdStrike to Buy SGNL to Expand Identity Security Capabilities

The CrowdStrike-SGNL deal underscores how identity security has become a critical component of enterprise cybersecurity as companies add cloud services and deploy AI-driven tools.

Read Article

darkreading Jan 08, 2026 at 22:21

Maximum Severity HPE OneView Flaw Exploited in the Wild

Exploitation of CVE-2025-37164 can enable remote code execution on HPE's IT infrastructure management platform, leading to devastating consequences.

Related CVEs: CVE-2025-37164

Read Article

darkreading Jan 08, 2026 at 21:34

Fake AI Chrome Extensions Steal 900K Users' Data

Threat actors ripped off a legitimate AI-powered Chrome extension in order to harvest ChatGPT and DeepSeek data before sending it to a C2 server.

Read Article

darkreading Jan 08, 2026 at 20:23

ChatGPT's Memory Feature Supercharges Prompt Injection

The "ZombieAgent" exploit makes use of ChatGPT's long-term memory and advanced capabilities.

Read Article

darkreading Jan 08, 2026 at 15:00

Here's What Cloud Security's Future Holds for the Year Ahead

Here are the top cloud security trends I'm seeing in my crystal ball for the New Year — particularly arming us for AI adoption.

Read Article