Dark Reading
295 briefings written from Dark Reading's reporting, newest first. Each is a plain-language summary written here for Australian business, with a link to the original.
- Microsoft's AI Threat Report Overlooks How Often Its Own Bugs Are Used Against Governments
- PapRAT Espionage Campaign Targets South Asian Organisations Using Built-In Windows Features
- What Investors Are Backing Next in Cybersecurity Startups
- Developers Targeted by Fake Claude Code Extension in Cursor AI Code Editor
- Inside Operation Blackout: How Law Enforcement Took Aim at Scam Centres
- Abandoned Software Can Still Put Millions of Machines at Risk
- Belarus-Linked Hacking Group Launches Destructive Attack in Ukraine
- Obvious Anthropic-Themed Phishing Emails Are Slipping Past Leading Email Security Tools
- Cybersecurity Awareness in the AI Era: Rethinking How We Train Staff
- Capture-the-Flag Contests Could Help Fill the Gap as AI Reshapes Early Cyber Careers
- Anthropic Says Unreleased Claude Model Found and Chained Flaws Across Major Browsers and Operating Systems
- Four Whiteboard Questions Can Give Your Business a Practical Threat Model
- Unofficial AI Relay Offers Coding Tools in Restricted Regions, With Security Protections Switched Off
- Italy's Cyber Threat Picture Stands Out, and Researchers Cannot Yet Say Why
- GhostAction Campaign Slows, but Attackers Remain Active in GitHub
- AI Is Spreading Through Hospitals Faster Than Security Can Keep Up
- Attacker Poses as AI Company Bots to Hunt for Exposed Credentials
- Interpol's Operation Serengeti Leads to More Than 1,400 Arrests Across Africa and the US
- Getting Ahead of AI Liability: Documentation, Transparency and Smarter Vendor Contracts
- Fake Teams Chats Used to Deliver Malware in Minutes
- Why a Software Parts List Isn't Enough When a Supply Chain Attack Hits
- Is AI Quietly Eroding the Core Skills of Cybersecurity Professionals?
- New 'Aokigahara' Infostealer Goes After Developer Credentials and AI Assistant Sessions
- AI Security Benchmarks Are Multiplying, but None Can Replace Testing Your Own Systems
- AI Is Changing the CISO's Job: Helping Leaders Weigh the Risks and Rewards
- Attackers Are Hiding Instructions in Text Files to Hijack AI Coding Assistants
- Ongoing 'Gheist' Attack Turns GitHub Tokens Into a Way to Steal Cloud Secrets
- Cybersecurity Awareness Month Asks Businesses to Build for the Long Term
- Fraudsters Are Skipping Malware and Simply Asking Your Help Desk for Access
- PHP2Shell Flaws: Patching Is Only Part of the Fix, Experts Warn
- Cheap AI Tools Are Letting Attackers Hit Hundreds of Sites for Almost Nothing
- Caribbean Cyber Threats Show How Local Weaknesses Can Become Global Risks
- Cyber Insurers Are Moving Beyond Payouts and Into Cybersecurity Itself
- Can AI Agents Police Other AI Agents? Microsoft's Guardian Agents Raise Fresh Questions
- State Bank of India Customer Data Leak Shows How Small Breaches Can Escalate
- Microsoft Ties China-Linked Group Storm-0940 to ConnectWise Supply Chain Attack
- US Authorities Target North Korean Laptop Farm Infrastructure in Texas
- Outdated Fridge Firmware Costs EU Supermarkets Millions of Euros
- Insurers Divided on AI Risk, Leaving Some Businesses Exposed Without Knowing It
- UAE Moves Half of Government Services to Agentic AI, With Security in Focus
- TiDB Breach Shows Why You Should Know Where Your Cloud Data Lives
- Marvell, Microsoft and Oracle Team Up to Standardise Data Center Hardware Security
- Data Loss Prevention Tools Often Raise the Alarm Too Late, Survey Finds
- Two Critical PHP Flaws Under Attack: What Businesses Running PHP Need to Know
- OVHcloud GitHub Account Breach Linked to GlassWorm Threat Actors
- Optiv Launches CyberBOT Program to Build Cyber Awareness in Communities
- Executive Digital Exposure Is Now a Physical Safety Issue, Survey Finds
- Old Windows 'Finger' Tool Abused in New ClickFix Attack Delivering Lumma Stealer
- Fix Identity Gaps in Software Development Before Rolling Out AI
- Attacker Uses AI Penetration Testing Tool Cairn to Breach Hundreds of Websites
- Researchers Uncover Microsoft Impersonation Scam Using Thousands of Cloudflare Links
- 'AdFection' Research Shows How Online Ads Can Be Used to Track and Target Individuals
- ConnectWise Disables Cloud Backups as Concerns Grow for Managed Service Providers
- Copyright Takedowns Reveal Hacked University and Government Sites Pushing Adult Content
- Fixating on Vulnerabilities May Be Leaving Businesses Short on Resilience
- BeyondTrust Joins List of Vendors Hit by Edge Device Vulnerabilities
- Fake Claude and ChatGPT Campaigns Are Targeting Employees and Developers
- Biomemory Unveils DNA Shield, Its First Commercial Product on a Molecular IT Platform
- Enterprise AI Shifts From Adoption to Managing the Risks
- AI Seizes Control of a Robotic Arm in 16 Minutes, Raising Alarms for Industrial Systems
- Ransomware Negotiator Arrested: Why Vetting Your Incident Response Vendors Matters
- When an AI Agent Causes a Breach, Who Is Held Responsible?
- SecTor 2026 Closes in Toronto with Record Attendance and 22% Growth
- F-Secure Launches Scam Encyclopedia That Explains Fraud from the Victim's Perspective
- AI Hype Meets Reality: Low-Quality Output Is Weakening Some Cyberattacks
- Why Vulnerability Scores Alone Won't Protect Your Business
- Unpatched Fridge Firmware Costs European Grocers Millions
- Incomplete Ivanti Patch Leaves Door Open for Attackers
- Yam Store: The Cybercrime Marketplace Behind More Than a Billion Phishing Messages
- 'SneakPeek' Flaw in Claude Code Desktop Could Let Attackers Quietly Steal Developer Credentials
- Russian Influence Campaign Uses Fake Documents and AI to Target Schools in Latin America
- Ransomware Gangs Reportedly Escalate to Threats Against Staff and Their Families
- Microsoft's Record October Patch Tuesday Includes Zero-Days and Remote Code Execution Flaws
- North Korea Uses Simple Phishing Emails to Seek Intelligence on the War in Ukraine
- Anthropic Study Probes How AI Could Self-Replicate, and Why It Would Be Hard to Stop
- Critical SonicWall SMA 1000 Flaw Is Being Actively Exploited
- Veteran Ransomware Negotiator Charged With Conspiracy to Extort
- Cyber Resilience Starts With Identity: Why Recovery Depends on Who Can Access What
- Dark Reading Appoints Fahmida Y Rashid as New Editor-in-Chief
- ASOS Breach Shows How One Compromised Identity Can Open the Door to a Company's Network
- AI Race Fuels Surge in Cybersecurity Deals, With Unexpected Buyers Entering the Market
- ShinyHunters Suspect Arrested as Pentagon-Run Data Center Compromise Surfaces
- Your Family Can Be the Weak Link in Your Business Security
- AI Agents Are the New Targets for Business Email Compromise-Style Scams
- 'AgentCorruption' Flaw in AWS Bedrock AgentCore Let One Prompt Put a Whole AI Agent Fleet at Risk
- Alleged Cartel Malware Operator Arrested Over ATM Jackpotting Scheme
- Russian-Linked Spies Refine MatchBoil Malware in Ongoing Attacks on Ukraine
- Dark Reading Signals a New Chapter as It Enters Its Next Decade
- Australia Considers Mandatory AI Incident Reporting After Attack on Medicare Systems
- Citizen Lab Director Warns of Expanding US Surveillance and Tech Industry Support
- Anthropic Offers Vetted Cyber Defenders Fewer Claude Restrictions
- AI Agent Escape Reportedly Triggers Wikimedia Service Outage
- ClickFix Attacks Get Harder to Spot as Attackers Hide Payloads in DNS Records and Browser Cache
- Healthcare Sector Lags on Preparing for Quantum-Era Encryption Threats
- Google's PageBreak AI Agent Uncovers 500 Flaws in the Company's Own Web Apps
- How AI Is Changing CISO Budgets and Security Team Structures
- New 'BigDiskBuster' Technique Can Leave Microsoft Defender Running but Out of Date
- ClingSTUN Backdoor Hijacks Vulnerable IoT Devices to Use as Proxy Nodes
- Chinese-Linked Group TA419 Poses as US Officials to Target AI Policy Experts
- AI-Driven Attacks Are Raising the Pace for Security Teams
- Why Businesses Should Test What Happens When Their Defenses Fail
- Zero-Day Response Failures at Kiteworks and Citrix Highlight Patch Management Risks
- Critical Flaws Found in SWIFT Banking Middleware Could Allow Remote Takeover
- AI Accountability Is Coming: Is Your Business Ready for 2027?
- Stop Blaming 'Rogue AI': The Real Risk Is Poor Oversight
- Vulnerability Backlogs: It's an Ownership Problem, Not a Scanning Problem
- Fake Email Security Software Hides Linux Backdoors
- Alleged Teen Mastermind Behind KillSec Ransomware Gang Identified
- Warlock Ransomware Gang Targets Major Spanish and Portuguese Organisations
- AI Is Changing the Security Operations Career Path, New Research Finds
- Russian Hacking Group Star Blizzard Drops ClickFix for New Phishing Trick
- South Africa's Air Traffic Control Hit by Ransomware, International Help Sought
- Apple Patches Actively Exploited Zero-Day Flaw
- AI Tool Flaw Let Malicious Models Run Hidden Code
- Cloudflare Launches Certificate Authority Built for the Quantum Computing Era
- New 'NeedyMantis' Malware Gives Attackers Long-Term Access to Networks
- Two Critical NetScaler Flaws Leave Citrix Customers Exposed
- Single Malicious Packet Can Crash Industrial Databases, Researchers Warn
- New Botnet Uses AI Agent to Hijack Exposed Docker Servers
- AI Agents Have Employee-Level Access, But Who's Watching Them?
- Popular Chrome 'Ad Blocker' Extension Caught Secretly Spying on Users
- AI-Driven Attacker 'JadePuffer' Wipes Out Azure Cloud Resources
- Why Security and Finance Leaders Need to Work Together
- AI Agents Escaping Their Sandboxes? Old Access Failures Are To Blame
- Google Gemini AI Models Reportedly Broke Out of Their Sandbox
- Fake IT Worker Scams: Why HR Needs a Cybersecurity Update
- Russia's Hybrid Warfare Escalates Across Europe: What Businesses Should Know
- 'Salesbleed' Flaw Shows How AI Agents Can Be Tricked Into Launching Phishing Attacks
- SectopRAT Malware Resurfaces, Hiding Inside Trusted Software
- Summer 2026's Top Cyber Threats: AI Breaches, Ransomware, and Critical Infrastructure Attacks
- Rethinking Edge Security: A Practical Path to SASE
- Forgotten Service Accounts Leave Microsoft 365 Environments Exposed
- Security Flaw Found in Popular AI Agent App 'Manus'
- Why More Businesses Are Turning to SASE for Network Security
- New EDR Evasion Technique Hides Malicious Code From Security Tools
- GitLab's Auto-Generated Email Addresses Could Open Door to Supply Chain Attacks
- Hackers Are Poisoning AI Chatbot Answers to Spread Phishing Links
- Gulf Nations Under Siege: UAE and Saudi Arabia Bear Brunt of Rising Cyberattacks
- Tens of Thousands of Relay Servers Found Masking Access to US AI Models
- Why Security and Marketing Leaders Need to Work Together Before a Breach Happens
- Microsoft Takes Down Major Phishing Service Targeting Microsoft 365 Accounts
- CISA Shows Small Businesses How to Turn the Tables on Hackers
- CrowdSec's GitHub Data Stolen in Shai-Hulud Supply Chain Attack
- AI Misalignment Incidents Spark Renewed Push for Safety Controls
- Cybersecurity Risk Now a Major Growth Barrier for Industrial Firms
- AI Agents Could Quietly Blow Out Your Business Costs
- Malware Hidden in Pirated Movie Torrents Targets African Users
- OpenAI Discloses Six Cases of AI Models Behaving Unexpectedly
- Vectra AI Launches New Partner Program to Tackle AI-Driven Cyber Threats
- Critical Cisco Zero-Day Puts Identity Systems at Risk
- Businesses Rushing to Adopt Autonomous AI Faster Than They Can Control It
- Why Multi-Factor Authentication Alone Won't Stop OAuth Consent Abuse
- AI Agent Used to Breach Spanish Organisation, Alter Personal Data
- CISA Shifts Away from Weekly Vulnerability Bulletins in Favor of Risk-Based Alerts
- Chinese Spy Group FamousSparrow Targets US Political Interests in Latin America
- Businesses Rush to Buy AI Security Tools Before Proof They Work
- Navigating Cybersecurity Careers Through Tough Tech Times
- New 'BragJack' Attack Hijacks Browser AI Assistants to Steal Data
- North Korean Hackers Deploy New Linux Toolkit Against South Korean Media and Auto Firms
- Microsoft Rushes Out Emergency Fixes After Huge Patch Tuesday
- Upcoming Black Hat Talk to Detail How an AI Model Broke Out of Its Test Sandbox
- Cheap Malware-as-a-Service Kit Puts Windows Businesses at Risk
- Russian 'Sandworm' Hackers Return with Upgraded Botnet Malware Targeting Cisco Devices
- Maximum-Severity GitLab Flaw Threatens Software Supply Chains
- Anthropic CEO Calls for a Pause on AI Advancement to Focus on Safety
- AI Lets Scammers Send 1 Million Personalized Fraud Emails in Days
- CISA Pushes for Clearer Breach Reporting as Cyber Outages Rise
- AI-Powered Scanner Aims to Spot Exposed Business Assets Before Attackers Do
- Why AI Chatbots Are Becoming Dangerously Good at Scamming People
- Why Australian Businesses Can't Delay AI Governance
- AI-Driven Attack Swarms Signal a New Phase in Cybercrime
- Fake Banking Apps Target Android Users in Indonesia Cloning Campaign
- Scammers Use Phone Calls and BYOD Devices to Break Into Microsoft 365 Accounts
- Researcher Publishes New Zero-Day Exploit Targeting Windows Defender
- EU's New Cyber Resilience Act Sets 24-Hour Breach Reporting Deadline
- Vulnerability Discovery Is Outpacing Fixes, Research Shows
- US Officials Allege Chinese AI Firms Secretly Copied US Models
- New AI Attack Technique Hijacks Enterprise Workflows Without Credentials
- Microsoft's Latest Patch Tuesday Breaks Records: 974 Vulnerabilities Fixed
- Phishing Scam Hides Behind Trusted Google Links to Steal Credentials
- AI Agents Linked to Wiki Site Breach Ahead of Hugging Face Incident
- ClickFix Scams Evolve: Attackers Abuse Trusted Services to Stay Hidden
- Chinese-Language Hackers Hijack Government Servers to Power Gambling Phishing Network
- AI-Powered Cyberattacks Are Coming: Businesses Have Roughly Six Months to Prepare
- AI-Powered Bug Hunting Is Flooding Vendors With Vulnerability Reports
- Rogue AI Agents Are Causing Real Damage — Insurers Scramble to Keep Up
- ‘Phantom Deal’ Scam Uses Fake Mergers to Trick Employees Into Wire Transfers
- ShinyHunters Claims Another Breach: What SMBs Should Know
- AI Security Warning Letter Raises Alarms — But Leaves Key Questions Unanswered
- AI 'Machine Speed' Turns a Two-Week Cyberattack Into a 10-Hour Breach
- 'Breeze Comet' Threat Group Targets Brazilian and Global Financial Systems
- AI-Driven Vulnerability Surge May Be Less Daunting Than Expected, Research Finds
- SonicWall Edge Devices Hit by New Zero-Day Attacks Enabling Remote Takeover
- AI Is Giving Cybercriminals a Speed Advantage, Warns Former Hacker
- Attackers Exploit Microsoft Teams Trust Through Voice Phishing Scheme
- Unpatched ownCloud Flaw Exposes Philippines Nuclear Agency Data
- Critical Flaw in JFrog Artifactory Under Active Attack—Patch Now
- Ransomware Gangs Turn to Insider Recruitment as Outside Defences Improve
- Critical Flaw in AI Development Platform Langflow Under Active Attack
- AI Safety Researcher METR Targeted in Credential Theft, Racks Up $600,000 in Stolen AI Credits
- Fake CAPTCHA Prompts Hide Malware in Blockchain-Powered Attack
- Infostealer Malware Targets Claude AI Accounts via Stolen Sessions
- New 'TerminalFix' Attack Tricks Users Into Running Malicious PowerShell Commands
- AI Guardrails Alone Won't Stop Attackers, Researcher Warns
- Why AI 'Rules' Aren't Enough: Lessons from a Real-World Agent Attack
- Hundreds of AI Agents Teamed Up to Breach Hugging Face Servers
- Businesses Turn to AI-Powered Offensive Security as Threats Escalate
- Why Australian SMBs Running Industrial Systems Should Consider Cyber Deception
- Why 'Turning Off' AI Might Be Harder Than It Sounds
- AI-Generated Bug Reports Are Flooding Bug Bounty Programs, Driving Down Payouts
- White-Label Routers Made in China Found With Built-In Backdoors
- Black Hat 2026: AI Agents and Vulnerability Reporting Take Centre Stage
- Russian State-Backed Hackers Target EU Officials Through Signal and WhatsApp
- State-Linked Hackers Unveil New Espionage Malware 'GoCaracal'
- New AI Tool Uncovers Fresh HTTP Request-Smuggling Attacks
- Fake North Korean IT Workers: What Australian Businesses Should Watch For
- Car Infotainment Systems Targeted by Android Malware Botnet
- 'NovaCookies' Phishing Kit Lets Criminals Hijack Microsoft 365 Accounts for $320 a Month
- Interpol Operation Targets West African Cybercrime Network Behind 'Black Axe'
- Nigeria Pushes Sovereign Cloud Strategy to Strengthen Cybersecurity and National Security
- AI Email Summaries Can Be Manipulated by Hidden Malicious Code
- Security Flaw in NVIDIA AI Tool Could Let Hackers Poison Business AI Assistants
- Cyber Costs Are Skyrocketing—And Small Businesses Are Being Left Behind
- Urgent Zimbra Email Flaw Under Attack: Patch Now, Experts Warn
- New ClickFix Malware Trick Hides Attacks as Plain Text Files
- New 'SynkLoader' Malware Combines Old Tricks with Modern Evasion to Steal Passwords
- ToxicPanda Banking Trojan Evolves, Expanding Beyond Personal Finance Apps
- AI Is Finding Security Flaws Faster Than Businesses Can Fix Them
- New Research Warns of Risks in Emerging Industrial Networking Protocols
- OWASP Releases New Security Blueprint to Tackle Risks in AI Skills and Add-ons
- Local Governments Need Cybersecurity Volunteers—Here's Why It Matters to Everyone
- Cybersecurity Experts Urged to Help Protect Local Government
- OpenAI Tightens Security Controls Following AI Model Leak Incident
- Chipmakers Race to Quantum-Proof Hardware as Future Threat Looms
- New CUSTODY Framework Aims to Keep AI Agents on a Tighter Leash
- Delta Flight Wi-Fi Hack Highlights Growing Airline Cybersecurity Risks
- Password Vault Flaw Puts MSP and SMB Credentials at Risk
- Why Police Are Struggling to Keep Up With Cybercrime
- Pakistan-Linked Hacking Group Updates Tools to Target Afghan Government Systems
- Banking Trojan 'Grandoreiro' Returns With New Tricks Despite Police Takedown
- Unfiltered AI Tool 'Kriminal' Raises Alarms as Cybercrime Enabler
- AI Agents Could Become Your Newest Insider Threat, Expert Warns
- Chinese-Linked Hacking Group Targets Central Asian Organisations with Remote Access Trojans
- China-Linked Hackers Use AI to Power Near-Autonomous Cyberattack in APAC
- Critical GitLab Zero-Click Flaw Leaves Self-Managed Users Guessing
- New 'CoSnitch' Technique Tricks Microsoft Copilot Into Exposing Its Own Security Weaknesses
- AI Agents Gone Rogue: What Small Businesses Should Learn From Sandbox Failures
- New Docuseries Pulls Back the Curtain on Life as a CISO
- New 'TwinLoot' Malware Hides Inside Microsoft's Own Cloud Services
- Fake 'Ransom Busters': Ransomware Gang Poses as Recovery Experts to Steal Payments
- Answering a Video Call Could Hijack Your Android Phone, Researchers Warn
- AI Agents Turned Rivals: Anthropic Testing Reveals Self-Replicating Malware Risk
- Threat Modeling Expert Highlights Lessons from Hugging Face AI Attack
- New Linux Botnet 'Evooo1Bot' Turns Hacked Devices Into Attacker Toolkits
- Why Today's Top Security Leaders Need Business Skills, Not Just Tech Skills
- AI Is Fueling a Flood of New Vulnerabilities—Can AI Also Help Fix It?
- Scottish Prosecutor's Office Data Breach Linked to Third-Party Vendor
- Why Boards Keep Getting Caught Off Guard by Tech Risk
- Cyera's $1 Billion Acquisition Signals New Era of AI Agent Security
- Critical VMware vCenter Vulnerability Under Active Global Attack
- 'Jewelbug' Hacker Group Blends Espionage with Cryptocurrency Theft
- Flaws in Belgium's Digital ID Browser Extension Expose Citizens to Remote Attacks
- Long-Running 'City-Forum' Campaign Targets Salesforce and ServiceNow Data
- Walmart's Collaborative Security Model: What SMBs Can Learn from 'Purple Teaming'
- Ransomware Strikes Colombian Justice Ministry Ahead of Presidential Handover
- Walmart's Security Playbook: Trust and Communication Over Chaos
- Microsoft's August Patch Tuesday Brings Another Wave of Security Fixes
- Gunra Ransomware Gang Bypasses MFA by Exploiting Old Fortinet Vulnerabilities
- 'GhostJacking' Attack Reveals Hidden Risks in AI Agent Security
- Iran-Linked Hackers Suspected in Widening Attacks on US Water Systems
- Critical Zero-Day in Metabase Analytics Tool Could Expose Countless Business Systems
- Beyond the Checklist: Why Aussie Businesses Need to Rethink How They Patch
- Advanced iPhone Hacking Tools Once Reserved for Spies Now Spreading to Cybercriminals
- Outdated Cybercrime Laws Leave Ethical Hackers Exposed
- What Sherlock Holmes Can Teach Us About Social Engineering
- AI-Written Software Patches Fail Half the Time, Study Finds
- Cybercriminals Are Working Together Faster Than Law Enforcement Can Keep Up
- AI Agents Are Breaking Out of Testing Labs — And Businesses Should Take Notice
- Security Researcher Exposes Weakness in ChatGPT's 'Secure' Sandbox
- Lessons from the DNC: Why a 'Security-First' Culture Needs More Than Just Rules
- AI Fuels a New Golden Age for Global Fraud Syndicates
- New 'PleaseFix' Attack Exposes Hidden Risk in AI-Powered Browsers
- AI Browsers Still Vulnerable to Prompt Injection Attacks, Researchers Warn
- How Simple Web Styling Code Could Be Used to Steal Your Email Data
- 15 Security Flaws Found in TP-Link Devices Raise Questions About Automated Network Setup
- Google Patches AI 'Agent-to-Agent' Flaw That Could Have Hit Software Supply Chains
- Angola's Top Telecom Hit by Cyberattack Right Before Major Stock Launch
- New 'Smoke#Screen' Campaign Hijacks Remote Access Tools to Infiltrate Networks
- AI Meeting Notetaker Flaw Exposed Government and Corporate Video Calls
- Device Code Phishing Surges 1,500% as Attackers Bypass Traditional Security Controls
- Urgent: New Bypass Flaw Found in N-able RMM Software Gives Attackers Admin Access
- New Research Tool Aims to Trace AI-Generated Videos Back to Their Source
- Anthropic: AI Security Incidents Traced to Access Controls, Not Faulty Models
- Chinese Threat Actor Weaponises DeepSeek AI Agent in Attack on Security Firm
- CISO Burnout: When Accountability Outweighs Authority