Security News

darkreading Jun 12, 2026 at 20:26

ShinyHunters Uses Oracle Zero-Day to Rampage Higher Ed

A major bug in Oracle's ERP software disproportionately affected American universities, and hackers have capitalized by stealing gobs of data.

Read Article

darkreading Jun 12, 2026 at 13:01

Claude Fable 5 Doesn't Change the Mythos Security Story

Stay cool: Mythos 5 is an upgrade over Mythos Preview while Fable 5 is Mythos "made safe for general use," Anthropic explained.

Read Article

darkreading Jun 12, 2026 at 00:58

Phishing Attack Volume Down 20%, but Risk Still Rising

Hackers are valuing quality over quantity, using AI to upgrade their phishing attacks rather than multiplying them.

Read Article

darkreading Jun 11, 2026 at 18:43

Max-Severity Ivanti Flaw Exploited 24 Hours After Disclosure

Initial methods suggest attackers had likely mapped out Ivanti's asset landscape upfront and acted quickly once the exploit became public.

Read Article

darkreading Jun 11, 2026 at 14:51

Segmentation Works for OT If Operators Are Paying Attention

Operational technology security remains as difficult as ever, with even the best practice recommendation falling short.

Read Article

darkreading Jun 11, 2026 at 00:01

Chinese, N. Korean Threat Groups Build on Asia-Pacific Success

North Korea's gross domestic product (GDP) has grown, in part because of the cybercrime gains of groups linked to the nation, which target business and financial firms.

Read Article

darkreading Jun 10, 2026 at 21:17

CISA Rewrites Federal Patching Requirements for AI Threat Era

The new directive gives federal agencies three days to fix the most dangerous flaws, while less severe issues can be deferred.

Read Article

darkreading Jun 10, 2026 at 20:07

Bug Bounty Research Triggers ServiceNow Security Alert

Bug bounty research inadvertently led organizations to believe they were being breached through their ServiceNow instances.

Read Article

darkreading Jun 10, 2026 at 19:34

AI Risk Worries Insurers and Businesses Alike

As companies adopt AI, many insurance firms are explicitly excluding AI risks, while others are forging ahead to create the right framework. What risks can firms reasonably manage?

Read Article

darkreading Jun 10, 2026 at 16:31

Nightmare-Eclipse Drops Yet Another Microsoft Exploit, RoguePlanet

The disgruntled researcher released yet another PoC for a Windows Defender bug that allows for system takeover, showing no signs of abandoning their ongoing feud with Microsoft.

Read Article

darkreading Jun 09, 2026 at 21:57

The Invisible Battlefield: How Cyber War Is Reshaping Everyday Life

Former National Cyber Director Chris Inglis warns that cyber attacks threaten hospitals, utilities and essential services.

Read Article

darkreading Jun 09, 2026 at 21:42

Blame AI: Patch Tuesday Hits Record 206 CVEs

Voluminous patch updates could soon be the norm, as artificial intelligence accelerates the speed and scale of vulnerability discovery.

Read Article

darkreading Jun 09, 2026 at 20:20

Microsoft Exchange Flaw Lets Attackers Spoof Any Email Address

"Ghost-Sender" uses Exchange Online or on-premises in hybrid mode with a third-party mail server or spam filter to achieve this level of spoofing.

Read Article

darkreading Jun 09, 2026 at 19:33

Miasma Supply Chain Worm Burrows Into 73 Microsoft Repositories

The attacks stemmed from a GitHub account that was also compromised in a previous Miasmi attack on Microsoft last month.

Read Article

darkreading Jun 09, 2026 at 15:37

Russian Attackers Weaponize WinRAR Flaw Against Ukrainian Orgs

Two separate campaigns target CVE-2025-8088, fixed last July, to conduct data theft and cyberespionage against military and government targets in Ukraine.

Related CVEs: CVE-2025-8088

Read Article

darkreading Jun 08, 2026 at 22:05

AI Slop Will Kill Cybersecurity Storytelling If We Let It

AI-generated content threatens credibility in cybersecurity. This "Ask the Expert" column explores why human oversight matters and how to maintain authentic narratives.

Read Article

darkreading Jun 08, 2026 at 20:59

Silent Ransom Group Hits US Law Firms in Escalating Extortion Attacks

The financially motivated group is combining vishing, IT impersonation, and in-person office intrusions to steal data and extort victims.

Read Article

darkreading Jun 08, 2026 at 20:28

Check Point VPN Flaw Exploited Since Early May

A newly discovered, critical zero-day vulnerability is under attack; a Qilin ransomware affiliate has been blamed for at least one incident.

Read Article

darkreading Jun 08, 2026 at 19:07

Iran Signed a Ceasefire — Its Hackers Didn't

An extension of the Geneva Conventions could impose restrictions on cyberwarfare under ceasefire conditions and close a major loophole in international conflict.

Read Article

darkreading Jun 08, 2026 at 16:13

'Hades' Campaign Against PyPI Puts New Spin on Shai-Hulud

The latest attacks, which hit 37 PyPI wheels and 19 code packages, show a continued evolution of the persistent software supply chain threat.

Read Article