Vulnerabilities
Attackers Target Maximum-Severity SSRF Flaw in SonicWall SMA 1000 Appliances
Threat actors are currently targeting a maximum-severity server-side request forgery vulnerability in SonicWall SMA 1000 network security appliances.
Dark Reading
Everything Threat Times has reported about Dark Reading: 15 stories, newest first. Part of our Cyber Attacks coverage.
Cloud Security
Dark Reading Report Calls for Identity Security Rethink Amid Cloud Identity Growth
A new report argues that the proliferation of enterprise apps and central cloud identity providers demands a fundamental shift in how organizations approach cybersecurity resilience.
Tech News
Dark Reading Names Fahmida Y Rashid as New Editor-in-Chief
Fahmida Y Rashid takes the helm at Dark Reading, aiming to maintain publication momentum and continue leading cybersecurity coverage.
Cyber Attacks
ClingSTUN Linux Backdoor Exploits 24 Flaws to Turn IoT Devices Into Proxy Nodes
A new Linux backdoor named ClingSTUN abuses known vulnerabilities in Internet of Things hardware to create a covert proxy network using legitimate STUN servers.
Cyber Attacks
Proof-of-Concept Technique Blocks Microsoft Defender Updates While Service Runs
A new cyber technique creates a silent detection gap by blocking updates to Microsoft Defender while leaving the service running normally.
AI
IANS' Kakolowski Discusses AI Impact on CISO Budgets and Security Teams
IANS senior director Nick Kakolowski outlines how artificial intelligence is reshaping security leadership budgets, ROI calculations, and team structures.
Cyber Attacks
Study Finds Healthcare Systems Largely Unprepared for Post-Quantum Threats
Analysis of 2.5 million devices across 50 organizations reveals significant gaps in readiness for quantum-era cryptography standards.
Cyber Attacks
ClickFix Campaigns Adopt DNS TXT and Cache Pre-fetching to Evade Detection
Threat actors behind the ClickFix campaign are using DNS TXT records and browser cache pre-fetching to conceal malicious payloads, complicating early-stage detection.
Cloud Security
ASOS Breach Highlights Risks of Customer-Facing SaaS Identity Compromise
The attack on the British retailer demonstrates how a single compromised identity can lead to deeper corporate network penetration.
AI
AI Push Fuels Cybersecurity M&A Boom With 117 Deals in Latest Quarter
Strategic mergers and acquisitions in cybersecurity surged last quarter, driven largely by artificial intelligence ambitions and non-traditional buyers.
Threat Intelligence
Dark Reading Announces New Decade and Breaking News for Readers
The cybersecurity publication marks ten years of coverage while sharing significant internal updates for its professional audience.
Threat Intelligence
UAC-0099 Refines MatchBoil Malware for Stealthier Espionage Campaigns
Russian-linked spy group UAC-0099 is upgrading its MatchBoil dropper to evade detection while targeting Ukrainian organizations with cyber-espionage operations.
Cyber Attacks
FBI Arrests Suspected ShinyHunters Operative in Major Cybercrime Takedown
Federal agents have detained a key member of the ShinyHunters group, marking a significant enforcement action against the notorious cybercrime syndicate.
Cyber Attacks
Dark Reading: Executives' Families Must Match Security Postures to Prevent Breaches
Dark Reading reports that the security weaknesses of an executive’s family members can serve as the primary entry point for cyberattacks.
Cyber Attacks
Report: AI Agents Face New Social Engineering Risks in 2026
As AI agents gain authority over business systems, attackers can manipulate them like business email compromise victims.