Articles
Practical reading for digital investigators, from the community, our sponsors and the wider industry.
Latest headlines
From Dark Reading, refreshed every hour. Opens the original story in a new tab.
Industry NewsDevs Hit by Trojanized Claude Code Extension for Cursor (opens the original source in a new tab)
Two serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development environments (IDEs).
via Dark Reading · Oct 30, 2026
Industry NewsBehind the Scenes of How Operation Blackout Went Down (opens the original source in a new tab)
A recent law enforcement operation to dismantle harmful scam centers was a big success. A threat intelligence expert walks us through what happened and why he wants more of the same.
via Dark Reading · Oct 30, 2026
Industry NewsL’Italia è afflitta da vulnerabilità informatiche, senza una causa chiara (opens the original source in a new tab)
I ricercatori non riescono a spiegare del tutto perché le minacce informatiche in Italia siano così diverse rispetto a quelle di qualsiasi altro Paese.
via Dark Reading · Oct 30, 2026
Industry NewsUndead Software Projects Continue to Raise Security Risks (opens the original source in a new tab)
A security firm patched a decade-old app to prevent the takeover of millions of machines, highlighting that abandoned domains remain a boon to attackers.
via Dark Reading · Oct 30, 2026
Industry NewsAs Russia's Cyberwar Evolves, Belarus Steps Forward (opens the original source in a new tab)
The FrostyNeighbor advanced persistent threat (APT) launched a destructive attack in Ukraine and is raising concerns about deeper alignment with Russian cyber objectives.
via Dark Reading · Oct 30, 2026
Industry NewsAnthropic-Themed Phishing Emails Bypass Top Security Tools (opens the original source in a new tab)
Obvious phishing emails with numerous red flags are somehow getting past some of the industry-leading secure email gateway (SEG) products.
via Dark Reading · Oct 29, 2026
Industry NewsRethinking Cybersecurity Awareness in the AI Era (opens the original source in a new tab)
This installment of the Reporters' Notebook video series discusses some of the trends and topics from Cybersecurity Awareness Month, from using AI for better training to educating next-generation workforces on modern…
via Dark Reading · Oct 29, 2026
Industry NewsWhy CTF Competitions May Be More Important Than Ever (opens the original source in a new tab)
As artificial intelligence squeezes early-career learning opportunities, capture-the-flag contests could be one way to help pick up the slack.
via Dark Reading · Oct 29, 2026
Industry NewsClaude Model Builds Exploits Across Major Browsers & OSes (opens the original source in a new tab)
An unreleased version of the AI model has found and chained multiple vulnerabilities in Chrome, Safari, Android, Windows, and Linux, Anthropic says.
via Dark Reading · Oct 29, 2026
Industry NewsThreat Modeling With 4 Simple Questions on a White Board (opens the original source in a new tab)
A four-question exercise that CISOs can use to create a threat model that promises results, without a big spend.
via Dark Reading · Oct 29, 2026
Industry NewsShadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes (opens the original source in a new tab)
The enigmatic service is providing popular AI coding tools to mainland China and other regions where OpenAI and Anthropic products are not officially for sale — but with key security features turned off.
via Dark Reading · Oct 29, 2026Industry NewsCyber Vulnerabilities Besiege Italy, Absent Clear Cause (opens the original source in a new tab)
Researchers can't quite explain why cyber threats look so different in Italy compared with everywhere else.
via Dark Reading · Oct 29, 2026
Industry NewsGhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub (opens the original source in a new tab)
The supply chain attack campaign's shift toward developer endpoints and cloud access signals what could be next for the cybercrime outfit.
via Dark Reading · Oct 28, 2026
Industry NewsAI Takes Root in Hospital Corridors, Raises Security Stakes (opens the original source in a new tab)
Artificial intelligence is everywhere in healthcare, from doctors' intake forms to cancer screenings. But in some cases, life-and-death uses are outpacing cybersecurity.
via Dark Reading · Oct 28, 2026
Industry NewsAttacker Relentlessly Scans for Credentials by Impersonating AI Bots (opens the original source in a new tab)
The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.
via Dark Reading · Oct 28, 2026
Industry NewsThird Serengeti Sweep Tops 1,400 Arrests as Investigations Mature (opens the original source in a new tab)
Interpol's annual Operation Serengeti, now in its third iteration, led to 1,462 arrests across 20 African countries and the US, recovering $105 million in stolen funds.
via Dark Reading · Oct 28, 2026
Industry News3 Frameworks to Protect CISOs & Orgs Against AI Liability (opens the original source in a new tab)
Cyber leaders can get ahead of AI liability with rigorous documentation, transparency, and smart contract negotiations with AI vendors.
via Dark Reading · Oct 27, 2026
Industry NewsExternal Teams Chats Anchor 15-Minute Malware Delivery (opens the original source in a new tab)
Mail bombing is getting a new look with a wide-scale, ongoing social engineering campaign that might be tied to the Black Basta ransomware gang.
via Dark Reading · Oct 27, 2026
Industry NewsSBOMs Alone Can't Reveal the Scope of a Supply Chain Attack (opens the original source in a new tab)
A recent Shai-Hulud attack shows defenders need real-time visibility into production code and affected services to respond to supply chain compromises.
via Dark Reading · Oct 27, 2026
Industry NewsBeware the Slasher: AI Could Kill Off Cybersecurity Pros' Skills (opens the original source in a new tab)
Nathan Hamiel outlines potential SecOps horror in the AI midst, as core technical capabilities go the way of reading an atlas or remembering phone numbers.
via Dark Reading · Oct 27, 2026
Industry News'Aokigahara' Stealer Targets 'Developer Keyrings' & AI Assistants (opens the original source in a new tab)
The malware's focus on AI tools expands the traditional infostealer playbook to expose a forest of AI sessions, sensitive business data, and developer infrastructure from a single compromised endpoint.
via Dark Reading · Oct 27, 2026
Industry NewsSo Many AI Security Benchmarks, but None Tell the Whole Story (opens the original source in a new tab)
Measuring artificial intelligence model security gets complex, fast, thanks to a growing patchwork of benchmarks targeting different variables in the equation. But none replace testing against your own code and…
via Dark Reading · Oct 26, 2026
Industry NewsRisks & Rewards: How AI Is Redefining the CISO's Role (opens the original source in a new tab)
Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks.
via Dark Reading · Oct 26, 2026
Industry NewsIn-the-Wild Attack Abuses AI Agents' Trust in Markdown (opens the original source in a new tab)
A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions.
via Dark Reading · Oct 26, 2026