Security News

darkreading Jan 08, 2026 at 23:37

CrowdStrike to Buy SGNL to Expand Identity Security Capabilities

The CrowdStrike-SGNL deal underscores how identity security has become a critical component of enterprise cybersecurity as companies add cloud services and deploy AI-driven tools.

Read Article

darkreading Jan 08, 2026 at 22:21

Maximum Severity HPE OneView Flaw Exploited in the Wild

Exploitation of CVE-2025-37164 can enable remote code execution on HPE's IT infrastructure management platform, leading to devastating consequences.

Related CVEs: CVE-2025-37164

Read Article

darkreading Jan 08, 2026 at 21:34

Fake AI Chrome Extensions Steal 900K Users' Data

Threat actors ripped off a legitimate AI-powered Chrome extension in order to harvest ChatGPT and DeepSeek data before sending it to a C2 server.

Read Article

darkreading Jan 08, 2026 at 20:23

ChatGPT's Memory Feature Supercharges Prompt Injection

The "ZombieAgent" exploit makes use of ChatGPT's long-term memory and advanced capabilities.

Read Article

darkreading Jan 08, 2026 at 15:00

Here's What Cloud Security's Future Holds for the Year Ahead

Here are the top cloud security trends I'm seeing in my crystal ball for the New Year — particularly arming us for AI adoption.

Read Article

darkreading Jan 07, 2026 at 22:19

Attackers Exploit Zero-Day in End-of-Life D-Link Routers

Hackers are attacking a critical zero-day flaw in unsupported D-Link DSL routers to run arbitrary commands.

Read Article

darkreading Jan 07, 2026 at 21:42

Phishers Exploit Office 365 Users Who Let Their Guard Down

Microsoft said that Office 365 tenants with weak configurations and who don't have strict anti-spoofing protection enabled are especially vulnerable.

Read Article

darkreading Jan 07, 2026 at 14:00

Cyberattacks Likely Part of Military Operation in Venezuela

Cyber's role in the US raid on Venezuela remains a question, though President Trump alluded to "certain expertise" in shutting down the power grid in Caracas.

Read Article

darkreading Jan 07, 2026 at 14:00

DDoSia Powers Affiliate-Driven Hacktivist Attacks

Pro-Russian group NoName057(16) uses a custom denial-of-service tool to mobilize volunteers and disrupt government, media, and institutional sites tied to Ukraine and the West.

Read Article

darkreading Jan 07, 2026 at 12:35

Lack of MFA Is Common Thread in Vast Cloud Credential Heist

An emerging threat actor that goes by "Zestix" used an assortment of infostealers to obtain credentials and breach file-sharing instances of approximately 50 enterprises.

Read Article

darkreading Jan 06, 2026 at 20:23

Scattered Lapsus$ Hunters Snared in Cyber Researcher Honeypot

Scattered Lapsus$ Hunters, also known as ShinyHunters, were drawn in using a realistic, yet mostly fake, dataset.

Read Article

darkreading Jan 06, 2026 at 16:28

ClickFix Campaign Serves Up Fake Blue Screen of Death

Threat actors are using the social engineering technique and a legitimate Microsoft tool to deploy the DCRat remote access Trojan against targets in the hospitality sector.

Read Article

darkreading Jan 05, 2026 at 23:32

Startup Trends Shaking Up Browsers, SOC Automation, AppSec

These startups reimagined browser security, pioneered application security for AI-generated code, and are building consensus on agentic vs. human costs.

Read Article

darkreading Jan 05, 2026 at 23:04

Advisor360 Gets a Handle on Shadow AI via Automation

With employees looking for the benefits of artificial intelligence, a fintech company stepped up controls with automation.

Read Article

darkreading Jan 05, 2026 at 22:51

CISOs Face a Tighter Insurance Market in 2026

Insured entities are becoming more sophisticated in their views on how cyber policies fit into their broader risk management plans.

Read Article

darkreading Jan 05, 2026 at 20:52

Critical 'MongoBleed' Bug Under Attack, Patch Now

A memory leak security vulnerability allows unauthenticated attackers to extract passwords and tokens from MongoDB servers.

Read Article

darkreading Jan 05, 2026 at 18:52

US Cyber Pros Plead Guilty Over BlackCat Ransomware Activity

Two US citizens pleaded guilty to working as ALPHV/BlackCat ransomware affiliates in 2023, and both were previously employed by prominent security firms.

Read Article

darkreading Jan 02, 2026 at 14:00

Cybersecurity Predictions for 2026: Navigating the Future of Digital Threats

Cybersecurity experts discuss 2026 predictions, highlighting the rise of AI-driven threats, the shift to resilience over prevention, and the urgent need for advanced security measures to combat evolving risks

Read Article

darkreading Jan 02, 2026 at 13:55

CTO New Year Resolutions for a More Secure 2026

From securing MCPs and supply chain defenses to formal AI and quantum governance, experts share their wish lists for cyber safety in 2026.

Read Article

darkreading Dec 31, 2025 at 17:35

Sunken Ships: Will Orgs Learn From Ivanti EPMM Attacks?

The April/May zero-day exploitations of Ivanti's mobile device management platform meant unprecedented pwning of thousands of orgs by a Chinese APT — and history will probably repeat itself.

Read Article