Security News

darkreading May 20, 2026 at 16:12

Patch Now: Critical Flaw in OT Robot OS Gives Attackers Control

An unauthenticated attacker can exploit the command injection vulnerability to gain remote access to robotic systems, causing significant disruption to the environment.

Read Article

darkreading May 20, 2026 at 07:00

Interpol's 'Operation Ramz' Pioneers Cross-Region Collabs in Middle East

While the numbers are modest, the crackdown on cybercrime involved 13 countries in the MENA region, the largest law enforcement collaboration to date.

Read Article

darkreading May 20, 2026 at 03:44

What It'll Take to Make AI BOMs Usable in a Modern Security Program

Five ways CISOs can prepare for consuming AI Bill of Materials and influence the direction of how they're generated.

Read Article

darkreading May 19, 2026 at 22:17

What Will Make AI BOMs Real?

A brief overview of the forces at play that will get more organizations on board with creating and consuming AI bill of materials (BOMs).

Read Article

darkreading May 19, 2026 at 21:55

Verizon DBIR: Enterprises Face a Dangerous Vulnerability Glut

Verizon's "2026 Data Breach Investigations Report" ("DBIR") finds that exploits are now involved in 31% of initial access for breaches, while patching lags too far behind the bad guys.

Read Article

darkreading May 19, 2026 at 21:06

Windows Zero-Day Barrage Continues After Patch Tuesday

YellowKey, GreenPlasma, and MiniPlasma add to the growing list of vulnerabilities a security researcher disclosed over the past six weeks.

Read Article

darkreading May 19, 2026 at 19:49

CISA Exposes Secrets, Credentials in 'Private' Repo

The agency's GitHub repository, publicly available since November 2025, was ironically named "Private-CISA."

Read Article

darkreading May 19, 2026 at 13:28

Looking Back, Looking Forward: Digesting a Dynamic Bouillabaisse of Cyber Evolution

Dark Reading editors reflect on two decades of dramatic change — from perimeter defense to assume-breach strategies — and warn that while AI, cloud, and COVID-19 have transformed the threat landscape, organizations are still failing at fundamental security hygiene that could stop sophisticated attacks in their tracks.

Read Article

darkreading May 19, 2026 at 11:13

Stealer Spoofs Google, Microsoft & Apple, Then Backdoors macOS

The SHub Reaper stealer, which hides behind fake WeChat and Miro installers, marks a shift from ClickFix social engineering to Apple script-based execution.

Read Article

darkreading May 18, 2026 at 21:44

Is 2026 the Year AI Bills of Materials Get Real?

Understanding AI BOMs and where they fit into risk management for artificial intelligence.

Read Article

darkreading May 18, 2026 at 21:43

Microsoft Exchange Zero-Day Under Attack, No Patch Available

CVE-2026-42897 stems from a cross-site scripting (XSS) vulnerability and can allow an attacker to compromise Outlook Web Access (OWA) mailboxes.

Related CVEs: CVE-2026-42897

Read Article

darkreading May 18, 2026 at 21:24

'Claw Chain' Vulnerabilities Threaten OpenClaw Deployments

The now patched vulnerabilities in the rapidly growing AI agent framework allow attackers to steal credentials, escalate privileges, and maintain persistence.

Read Article

darkreading May 18, 2026 at 19:53

Shai-Hulud Worm Clones Spread After Code Release

The release of Shai-Hulud source code spells trouble for software developers as researchers worry the self-replicating worm could scale.

Read Article

darkreading May 18, 2026 at 15:41

Fuel Tank Breaches Expand Scope of Iran's Cyber Offensive

Security experts have long warned that insecure automatic tank gauge (ATG) systems exposed on the Internet can be tampered with by threat actors.

Read Article

darkreading May 18, 2026 at 13:00

The Boring Stuff is Dangerous Now

AI agents capable of discovering and exploiting obscure vulnerabilities are emerging alongside developers producing vast amounts of potentially flawed AI-generated code, forcing defenders to adapt accordingly.

Read Article

darkreading May 18, 2026 at 12:00

Boulevard of Broken Dreams: 2 Decades of Cyber Fails

From CrowdStrike's outage and SIEM's longevity to epic business blunders and the jaded reality of living in a post-breach world, Dark Reading looks back at the mistakes, miscalculations, systemic failures, and cringeworthy moments that still have us shaking our heads.

Read Article

darkreading May 18, 2026 at 01:00

Can Laws Stop Deepfakes? South Korea Aims to Find Out

South Korea's local elections next month will be a test bed for how effective regulations might be to stymie the flow of deepfakes.

Read Article

darkreading May 15, 2026 at 12:00

Cyber Pioneers Ponder Past as Prologue

Robert "RSnake" Hansen, Katie Moussouris, Rich Mogull, Richard Stiennon, and Bruce Schneier reflect on how their favorite columns penned for Dark Reading over the past 20 years have stood the test of time.

Read Article

darkreading May 15, 2026 at 01:00

Taiwan Incident Highlights Cybersecurity Gaps in Rail Systems

A Taiwanese student experimenting with software-defined radio technology shut down three bullet trains for nearly an hour, leading to an anti-terrorism response.

Read Article

darkreading May 14, 2026 at 20:57

SecurityScorecard Snags Driftnet to Level Up Threat Intelligence

The new acquisition looks to boost visibility into third-party ecosystems that are becoming a bigger concern as vectors for supply-chain attacks.

Read Article