Security News

darkreading Mar 11, 2026 at 05:00

Middle East Conflict Highlights Cloud Resilience Gaps

Data centers — used by both governments and militaries for operations — are now fair game, not just for cyberattacks, but for kinetic attacks as well.

Read Article

darkreading Mar 11, 2026 at 01:08

Microsoft Patches 83 CVEs in March Update

For a change, there's little in this month's Patch Tuesday that should cause panic, according to security experts.

Read Article

darkreading Mar 10, 2026 at 21:05

'Overly Permissive' Salesforce Cloud Configs in the Crosshairs

Some customers have mishandled guest user configurations otherwise intended to allow third-party access to important — and sensitive — client data.

Read Article

darkreading Mar 10, 2026 at 18:57

Russian Threat Actor Sednit Resurfaces With Sophisticated Toolkit

After several years of using simple implants, the Russia-affiliated actor is back with two new sophisticated malware tools.

Read Article

darkreading Mar 10, 2026 at 13:30

'BlackSanta' EDR Killer Targets HR Workflows

A campaign by Russian-speaking cyberattackers hijacks workflows to deliver security-busting malware, allowing attackers to steal data without detection.

Read Article

darkreading Mar 09, 2026 at 21:09

White House Cyber Strategy Prioritizes Offense

In a seven-page strategy document, the Trump administration signaled a shift to preemption and deterrence to handling cyber threats.

Read Article

darkreading Mar 09, 2026 at 20:42

'InstallFix' Attacks Spread Fake Claude Code Sites

A fresh cyberattack campaign blends malvertising with a ClickFix-style technique that highlights risky behavior with AI coding assistants and command-line interfaces.

Read Article

darkreading Mar 09, 2026 at 12:05

Chinese Cyber Threat Lurks In Critical Asian Sectors for Years

An undefined Chinese-speaking actor wields a combo of custom malware, open source tools, and LOTL binaries against Windows and Linux, likely for spying.

Read Article

darkreading Mar 06, 2026 at 19:04

Cylake Offers AI-Native Security Without Relying on Cloud Services

Cylake's platform will analyze security data locally and identify potential attacks for organizations concerned about data sovereignty.

Read Article

darkreading Mar 06, 2026 at 17:49

North Korean APTs Use AI to Enhance IT Worker Scams

DPRK worker scams are old hat, but they're still working, thanks to AI tools that help with everything from face swapping to daily emails.

Read Article

darkreading Mar 06, 2026 at 15:05

EU Auto Rules Shift Gears on Cybersecurity Standards

The European Union is taking new precautions as climate change and cybersecurity threats rise across the automotive industry.

Read Article

darkreading Mar 06, 2026 at 14:01

Iran's Cyber-Kinetic War Doctrine Takes Shape

Iran has been hacking IP cameras to plan missile strikes against its enemies, and mounting other attacks on physical assets, showing how cyber and kinetic warfare are fast becoming one in the same.

Read Article

darkreading Mar 06, 2026 at 13:37

Cyberattack on Mexico's Gov't Agencies Highlight AI Threat

Using Anthropic's Claude, OpenAI's ChatGPT, and a detailed playbook prompt, a handful of cyberattackers reportedly gained access to government agencies and its citizens' data.

Read Article

darkreading Mar 05, 2026 at 21:56

Nation-State Actor Embraces AI Malware Assembly Line

Pakistan's APT36 threat group has begun using vibe-coding to churn out mediocre malware, but at a scale that could overwhelm defenses.

Read Article

darkreading Mar 05, 2026 at 21:23

Tycoon 2FA Goes Boom as Europol, Vendors Bust Phishing Platform

The phishing-as-a-service platform was popular among cyber threat actors because of its ability to bypass multifactor authentication defenses.

Read Article

darkreading Mar 05, 2026 at 20:11

Cisco Drops 48 New Firewall Vulnerabilities, 2 Critical

Edge bugs are so fetch, and Cisco just dropped 50 new ones, including some heavy hitters with 10 out of 10 scores on the CVSS scale.

Read Article

darkreading Mar 05, 2026 at 16:55

Fig Security Emerges From Stealth to Fix Broken Security Operations

Fig Security's platform traces security data flows end-to-end across SIEMs, pipelines, and response systems to alert teams before infrastructure changes break critical defenses.

Read Article

darkreading Mar 05, 2026 at 16:34

Software Development Practices Help Enterprises Tackle Real-Life Risks

Organizations can borrow secure-by-design processes to manage non-technical challenges like governance or the inevitable human error.

Read Article

darkreading Mar 05, 2026 at 14:00

LatAm Now Faces 2x More Cyberattacks Than US

Much of Central and South America struggles with cybersecurity maturity, and hackers are taking advantage.

Read Article

darkreading Mar 04, 2026 at 21:04

VMware Aria Operations Bug Exploited, Cloud Resources at Risk

Exploitation of the command injection flaw in VMware Aria Operations could grant an attacker broad acess to victims' cloud environments.

Read Article