Security News

darkreading Jun 08, 2026 at 20:28

Check Point VPN Flaw Exploited Since Early May

A newly discovered, critical zero-day vulnerability is under attack; a Qilin ransomware affiliate has been blamed for at least one incident.

Read Article

darkreading Jun 08, 2026 at 19:07

Iran Signed a Ceasefire — Its Hackers Didn't

An extension of the Geneva Conventions could impose restrictions on cyberwarfare under ceasefire conditions and close a major loophole in international conflict.

Read Article

darkreading Jun 08, 2026 at 16:13

'Hades' Campaign Against PyPI Puts New Spin on Shai-Hulud

The latest attacks, which hit 37 PyPI wheels and 19 code packages, show a continued evolution of the persistent software supply chain threat.

Read Article

darkreading Jun 05, 2026 at 19:04

Exposed Fuel Tank Gauges Under Attack in the US

Threat actors are taking advantage of Internet-exposed tank gauges by breaching gas stations, opening the door to disruption.

Read Article

darkreading Jun 05, 2026 at 14:40

Adaptive, Agentic AI Worms Loom as Next Enterprise Threat

AI worms, or "viruses with wings and brains," adapt to new environments, seek out vulnerabilities, and will likely strike within a year, researchers say.

Read Article

darkreading Jun 05, 2026 at 13:00

Trump AI Order Seeks Voluntary Frontier Model Testing

The White House's executive order establishes voluntary framework for early government access to frontier models while investing in federal security.

Read Article

darkreading Jun 04, 2026 at 21:47

Rust-Written IronWorm Hits NPM Supply Chain

Like Shai-Hulud, the campaign targets developers to steal credentials and reuses them to propagate across the software supply channel.

Read Article

darkreading Jun 04, 2026 at 21:23

China's TA4922 Expands Cybercrime Attacks Globally

One of the world's most diverse, least-focused cybercrime groups is enlarging its footprint beyond East Asia.

Read Article

darkreading Jun 04, 2026 at 21:08

4 Critical Threats Where Attackers Have the Advantage

Gartner analysts issued a call to action to bolster defenses against several emerging critical threats, such as deepfakes and prompt injections.

Read Article

darkreading Jun 04, 2026 at 14:22

Bugcrowd Launches EU Data Residency Option For Evolving Data Sovereignty Needs

Organizations are growing serious about what nation’s rules apply to their data. Experts point to geopolitical tensions as a main contributing factor.

Read Article

darkreading Jun 04, 2026 at 04:01

Pakistan Spies on Afghan Finance Ministry With Xeno RAT

Despite broadly connected digital infrastructure, standard fare TTPs are enough to cause trouble for Afghanistan's porous cybersecurity.

Read Article

darkreading Jun 03, 2026 at 21:34

Attackers Use AI to Automate EDR Evasion Testing

Python scripts were used to test malware against endpoint detection and response agents from Sophos, CrowdStrike, and Windows Defender.

Read Article

darkreading Jun 03, 2026 at 19:52

Tropical Blend: Cyber & Politics Ramp Up Across Latin America

China-linked espionage groups have attacked at least a dozen nations in the region, gathering information on maritime shipping, oil production, and other geopolitical interests.

Read Article

darkreading Jun 03, 2026 at 19:10

Cyber Insurance Rates Are Dropping, but Exclusions Widen

Cyber insurance coverage is slowly changing, and some policies may not provide coverage for social engineering attacks like ClickFix.

Read Article

darkreading Jun 03, 2026 at 19:00

Coding Gaffe Exposes Microsoft 365 Accounts to Widespread Takeover

A disabled security setting meant to protect authentication across Android versions of key apps like Word, PowerPoint, and Excel paved the way for attackers to steal logins and data.

Read Article

darkreading Jun 03, 2026 at 12:01

Malicious Notifications Could Trick Google Gemini Users

A prompt injection flaw in Google Gemini's voice assistant let attackers hide malicious commands in notifications, enabling social engineering and more.

Read Article

darkreading Jun 03, 2026 at 10:01

Global Stock Exchange Hit by Monthslong Email Campaign

A threat actor got a near-continuous view into an influential finance executive's email inbox, thanks to clever use of legitimate, native Windows tools.

Read Article

darkreading Jun 02, 2026 at 21:51

Zoom CISO: AI as Security Enabler, Not Role-Replacer

As Zoom's CISO, Sandra McLeod, discusses the challenges of securing a global communication platform, the promise of AI-driven security workflows, and advice for aspiring cybersecurity leaders.

Read Article

darkreading Jun 02, 2026 at 21:32

FBI-Flagged Phishing Kit Kali365 Expands Its Reach

Once targeting just Microsoft 365, the phishing-as-a-service platform now aims at AWS, Okta, and Russian platforms, while relying on device code phishing.

Read Article

darkreading Jun 02, 2026 at 20:11

DriveSurge Hijacks Thousands of Sites for ClickFix, FakeUpdate Attacks

A sneaky, wide-scale IAB operation uses a malicious traffic distribution system (TDS) to redirect visitors of trusted websites to ones that deliver malware.

Read Article