Veille : Dark Reading
Les publications récentes de Dark Reading.
Mis à jour le 22 octobre 2026 à 17:06 · 50 liens sur 30 jours
UAE Transitions 50% of Gov't Services to Agentic AI (nouvel onglet)
The United Arab Emirates says it's creating a foundation of security and safety as it transforms its public service footprint.
TiDB Breach Exposes Flawed Cloud Security Assumptions (nouvel onglet)
Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the data comes home to roost.
Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security (nouvel onglet)
The effort is aimed at standardizing a NIST FIPS 140-3 Level 3 integrated HSM for cloud and hyperscale data center infrastructure.
Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens (nouvel onglet)
Research finds that, among respondents experiencing data loss, only 16% said DLP blocked their most significant incidents before data left the organization.
'PHP2Shell' Bugs Signal Red Alert for Security Industry (nouvel onglet)
Security teams are scrambling to remediate two critical PHP vulnerabilities following leaked details and reports of exploitation attempts.
OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors (nouvel onglet)
A developer's GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users.
Optiv Launches CyberBOT Cybersecurity Awareness Training Program (nouvel onglet)
Hands-on sessions provide educators, nonprofits, and community leaders with an accessible resource to foster year-round cyber awareness and build more resilient communities.
Survey Finds High-Profile Executives Feel Untouchable as Digital Exposure Turns Into Physical Risk (nouvel onglet)
360 Privacy finds more than 8 in 10 security and wealth professionals say cybersecurity and physical security can no longer be separated.
Decades-Old Windows Utility Powers Modern ClickFix Attack (nouvel onglet)
The attack uses malicious Google search results related to Amazon and leverages the "finger" utility to launch a CAPTCHA that installs malware, including the Lumma stealer.
Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys (nouvel onglet)
Google, Mozilla, Apple, the Go project and others moved swiftly to block the affected certificates from the Indian CA, though it's unclear how the keys were compromised.
Ex-OpenAI Engineer Detained After Planting Secret Recorder at HQ (nouvel onglet)
The perp, who has Saudi ties, was arrested for allegedly bugging an OpenAI conference room, highlighting a preventable insider threat vector.
Close Identity Gaps in Software Development Before Unleashing AI (nouvel onglet)
Artificial intelligence is complicating security in the software development life cycle, but a Dark Reading roundtable found collaboration, better identity visibility, and reduced testing costs offer…
Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree (nouvel onglet)
A Chinese-speaking attacker has compromised hundreds of websites across the globe, looting from big fish like John Deere, SharkNinja, and engine manufacturer Cummins.
Researchers Infiltrate Microsoft Tech Support Scam Operation (nouvel onglet)
A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands of Cloudflare links.
'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery (nouvel onglet)
Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest.
ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs (nouvel onglet)
Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials; ConnectWise says customer impact remains unconfirmed.
OnlyFans Copyright Takedowns Expose Compromised Websites (nouvel onglet)
Copyright takedown requests tied to OnlyFans and other adult content creators are revealing how attackers exploit vulnerable university and government websites to manipulate search results. UpGuard's…
The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience (nouvel onglet)
An industry-wide laser focus on vulnerabilities has left cybersecurity teams without enough room to strategize for resilience.
BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs (nouvel onglet)
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk (nouvel onglet)
Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.
Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform (nouvel onglet)
The launch follows the acquisition of catalog's assets and the appointment of Laurent Guengant as CEO earlier this year.
Enterprise AI Enters Risk Management Phase as Security Concerns Rise (nouvel onglet)
Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution.
AI Takes Control of Robotic Arm in 16 Minutes Flat (nouvel onglet)
Most OT devices at utilities, factories, and elsewhere have been deployed for a decade or more, but operators need to get agile and deploy new cyber defenses.
When Your Ransomware Negotiator Works for the Other Side (nouvel onglet)
The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight.
When AI Agents Commit Breaches, Humans May Not Be Held Liable (nouvel onglet)
As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.
SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape (nouvel onglet)
The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks, drawing record attendance and marking 22% growth.
F-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Types of Consumer Fraud (nouvel onglet)
Built from decades of threat intelligence research, the new resource explains scams from the victims' perspective and tracks emerging forms of cyber crime.
AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too (nouvel onglet)
Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
Vulnerability Management Isn't About the Score — It's About How It Applies to You (nouvel onglet)
Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware (nouvel onglet)
Hundreds of stores lost millions of euros because they hired third parties to manage the outdated OT firmware running their cooling systems.
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles (nouvel onglet)
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
Yam Store: The Phishing Network Behind a Billion Messages (nouvel onglet)
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat (nouvel onglet)
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
Russian Influence Operation Widely Targets Latin America (nouvel onglet)
The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador, among other efforts.
Ransomware Gangs Embrace Physical Threats, Family Stalking? (nouvel onglet)
Organizations are reporting that employees face threats of stalking, physical violence, and abduction. But these alarming claims are hard to verify.
Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday (nouvel onglet)
The scary surprises in the largest security update ever include defense bypasses and unauthenticated RCEs.
North Korea Phishes Ukrainians for War Intel (nouvel onglet)
The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.
Anthropic Finds Ingredients for Future AI Worms (nouvel onglet)
Anthropic's latest study combines IoT and network tests to explore AI self-replication, which researchers said would be "challenging" to shut down.
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack (nouvel onglet)
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.
Prominent Ransomware Negotiator Faces Extortion Charges (nouvel onglet)
Edward Dubrovsky, a longtime cybersecurity executive, was arrested and charged in Pennsylvania last week under conspiracy to extort money.
No Identity, No Recovery: Cyber Resilience Starts With IAM (nouvel onglet)
The proliferation of enterprise apps and the centrality of cloud identity providers requires an identity security rethink.
Passing the Baton: Dark Reading Names New Editor-in-Chief (nouvel onglet)
Fahmida Y. Rashid will keep the momentum going as she leads Dark Reading.
ASOS Breach Reveals the Risks in Customer-Facing SaaS (nouvel onglet)
The attack on the British retailer shows that compromising a single identity can lead to much deeper penetration of the corporate network.
AI Scramble Drives Cybersecurity M&A Boom (nouvel onglet)
Welcome to another gangbuster year for strategic M&A activity in cyber, with 117 deals announced in the latest quarter. What's different: Many of the buyers are not your typical cybersecurity firms.
What We Missed: FBI Strikes Back at ShinyHunters (nouvel onglet)
In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from the arrest of a suspected ShinyHunters operative to the compromise of a Pentagon-run…
Security Threats Don't Stop at the Office: Why Executives' Families Need Training, Too (nouvel onglet)
Those closest to executives must match their security postures because the weakest link in a family can become the entry point for attacks.
Social Engineering AI Agents: The New BEC for 2026 (nouvel onglet)
As AI agents gain authority over business systems, attackers can manipulate them like business email compromise (BEC) victims.
'AgentCorruption' Puts AWS Environments at Risk With Single Prompt (nouvel onglet)
A now-patched vulnerability in AWS Bedrock AgentCore could have allowed an attacker to use one AI chatbot to take over an organization's entire fleet.
Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting (nouvel onglet)
The first cybercriminal to ever make the FBI's "10 Most Wanted Fugitives" list allegedly infused Tren de Aragua's violent criminal operations with cash.
Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift (nouvel onglet)
Cyber-espionage actor UAC-0099 has been steadily refining its flagship dropper in campaigns targeting Ukrainian organizations.