Real cyber-threats unfolding around the world right now — ransomware, phishing, malware, breaches and zero-day exploits. Click any threat to see what happened and exactly how to stay protected.
Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Conne…
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's …
Attackers continue exploiting gaps in MFA coverage, using stolen credentials to access VPNs, RDP, and Windows systems t…
SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-…
The Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft, €8.6 million ($9…
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to view video information wi…
The dangerous part of a stolen identity isn't always the initial login. It's what an attacker can do with that access n…
Three vulnerabilities in LG's webOS can be chained to give an attacker on the same local network root access to certain…
A user opens a browser tab, pastes data into a chat assistant, and nothing is installed. A developer adds a coding assi…
Attackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and…
Two of 31 newly disclosed flaws in Progress Software's MarkLogic Server database could let an account given only some m…
GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Ed…
Low-cost Android smartphones have been shipped with malicious software baked into the device firmware, allowing bad act…
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a fam…
Norway's Data Protection Authority (Datatilsynet) has fined Microsoft-owned advertising company Xandr NOK 92 million ($…
Edward Dubrovsky, a longtime cybersecurity executive, was arrested and charged in Pennsylvania last week under conspira…
Russian cloud services provider Yandex announced that drone attacks damaged three of its data centers, forcing it to sh…
Anthropic announced that its internal AI models undergoing "high-risk and cybersecurity evaluations" no longer have int…
The proliferation of enterprise apps and the centrality of cloud identity providers requires an identity security rethi…
Ledger has confirmed that some of its devices distributed through Southeast Asian reseller CryptoBilis were compromised…
Attackers remotely defrosted refrigerators at multiple French supermarket chains overnight in a cyberattack that report…
Some meetings last longer than it took attackers to jump on a newly disclosed security flaw this week. Within hours, th…
Fahmida Y Rashid will keep the momentum going as she leads Dark Reading.
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity f…
The attack on the British retailer shows that compromising a single identity can lead to much deeper penetration of the…
Welcome to another gangbuster year for strategic M&A activity in cyber, with 117 deals announced in the latest quarter.…
In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from the a…
Those closest to executives must match their security postures because the weakest link in a family can become the entr…
As AI agents gain authority over business systems, attackers can manipulate them like business email compromise (BEC) v…
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary scripts…
View CSAF Summary The following versions of Grid Protection Alliance openPDC and openHistorian are affected: openPDC <2…
View CSAF Summary Successful exploitation of these vulnerabilities could allow a malicious user to access the device an…
Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools…
A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been de…
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain full unauthorized ac…
View CSAF Summary Hitachi Energy is aware of open-source software vulnerabilities that affect REB500 product versions l…
View CSAF Summary Hitachi Energy is aware of unauthenticated servlet access vulnerabilities that affect Asset Suite pro…
View CSAF Summary Hitachi Energy is aware of RCE (Remote Code Execution) vulnerability in Apache ActiveMQ component of …
Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data theft…
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call a…
We look at a new version of the MacSync macOS stealer with a backdoor module that targets crypto enthusiasts and develo…
Kaspersky GERT experts dive into the technical incident analysis of PAYLOAD ransomware: an encryptionless, binary-less …
Kaspersky experts have discovered a new MovieReaper campaign. The multi-stage Trojan spreads through movie torrents, su…
The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information fro…
Kaspersky GERT experts have uncovered a new campaign by the NightEagle APT, featuring the GhostContainer backdoor and t…
Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other sof…
Kaspersky GERT experts have discovered new backdoors used by the Toy Ghouls group. One version of the backdoor uses the…
A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drive…
Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRab…
Threat actors are distributing the ValleyRAT backdoor disguised as adware. We analyze the infection chain, from the mal…
Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extort…
The report contains statistics on industrial threats for Q2 2026, including ransomware, miners, spyware and other threa…
This report covers statistics on vulnerabilities, exploits, and C2 frameworks in Q2 2026. For the first time ever, we a…
It can be daunting to determine who's responsible for showing ads on the websites we visit, or who's harvesting data fr…