Articles
Practical reading for digital investigators, from the community, our sponsors and the wider industry.
Latest headlines
From Dark Reading, refreshed every hour. Opens the original story in a new tab.
Industry NewsBeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs (opens the original source in a new tab)
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
via Dark Reading · Oct 16, 2026
Industry NewsFake Claude, ChatGPT Attacks Surge, Putting Developers at Risk (opens the original source in a new tab)
Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.
via Dark Reading · Oct 16, 2026
Industry NewsBiomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform (opens the original source in a new tab)
The launch follows the acquisition of catalog's assets and the appointment of Laurent Guengant as CEO earlier this year.
via Dark Reading · Oct 16, 2026Industry NewsEnterprise AI Enters Risk Management Phase as Security Concerns Rise (opens the original source in a new tab)
Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution.
via Dark Reading · Oct 16, 2026
Industry NewsAI Takes Control of Robotic Arm in 16 Minutes Flat (opens the original source in a new tab)
Most OT devices at utilities, factories, and elsewhere have been deployed for a decade or more, but operators need to get agile and deploy new cyber defenses.
via Dark Reading · Oct 16, 2026
Industry NewsWhen Your Ransomware Negotiator Works for the Other Side (opens the original source in a new tab)
The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight.
via Dark Reading · Oct 16, 2026
Industry NewsWhen AI Agents Commit Breaches, Humans May Not Be Held Liable (opens the original source in a new tab)
As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.
via Dark Reading · Oct 16, 2026Industry NewsSecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape (opens the original source in a new tab)
The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks, drawing record attendance and marking 22% growth.
via Dark Reading · Oct 15, 2026Industry NewsF-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Types of Consumer Fraud (opens the original source in a new tab)
Built from decades of threat intelligence research, the new resource explains scams from the victims' perspective and tracks emerging forms of cyber crime.
via Dark Reading · Oct 15, 2026
Industry NewsAI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too (opens the original source in a new tab)
Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
via Dark Reading · Oct 15, 2026
Industry NewsVulnerability Management Isn't About the Score — It's About How It Applies to You (opens the original source in a new tab)
Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.
via Dark Reading · Oct 15, 2026
Industry NewsEU Grocers Pay a Steep Price for Unpatched Fridge Firmware (opens the original source in a new tab)
Hundreds of stores lost millions of euros because they hired third parties to manage the outdated OT firmware running their cooling systems.
via Dark Reading · Oct 15, 2026
Industry NewsIvanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles (opens the original source in a new tab)
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
via Dark Reading · Oct 14, 2026
Industry NewsYam Store: The Phishing Network Behind a Billion Messages (opens the original source in a new tab)
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
via Dark Reading · Oct 14, 2026
Industry NewsAnthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat (opens the original source in a new tab)
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
via Dark Reading · Oct 14, 2026
Industry NewsRussian Influence Operation Widely Targets Latin America (opens the original source in a new tab)
The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador, among other efforts.
via Dark Reading · Oct 14, 2026
Industry NewsRansomware Gangs Embrace Physical Threats, Family Stalking? (opens the original source in a new tab)
Organizations are reporting that employees face threats of stalking, physical violence, and abduction. But these alarming claims are hard to verify.
via Dark Reading · Oct 14, 2026
Industry NewsZero-Days Lurk in Microsoft's Overgrown October Patch Tuesday (opens the original source in a new tab)
The scary surprises in the largest security update ever include defense bypasses and unauthenticated RCEs.
via Dark Reading · Oct 13, 2026
Industry NewsNorth Korea Phishes Ukrainians for War Intel (opens the original source in a new tab)
The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.
via Dark Reading · Oct 13, 2026
Industry NewsAnthropic Finds Ingredients for Future AI Worms (opens the original source in a new tab)
Anthropic's latest study combines IoT and network tests to explore AI self-replication, which researchers said would be challenging to shut down.
via Dark Reading · Oct 13, 2026
Industry NewsMaximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack (opens the original source in a new tab)
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.
via Dark Reading · Oct 12, 2026
Industry NewsProminent Ransomware Negotiator Faces Extortion Charges (opens the original source in a new tab)
Edward Dubrovsky, a longtime cybersecurity executive, was arrested and charged in Pennsylvania last week under conspiracy to extort money.
via Dark Reading · Oct 12, 2026
Industry NewsNo Identity, No Recovery: Cyber Resilience Starts With IAM (opens the original source in a new tab)
The proliferation of enterprise apps and the centrality of cloud identity providers requires an identity security rethink.
via Dark Reading · Oct 12, 2026
Industry NewsPassing the Baton: Dark Reading Names New Editor-in-Chief (opens the original source in a new tab)
Fahmida Y. Rashid will keep the momentum going as she leads Dark Reading.
via Dark Reading · Oct 12, 2026