Articles

via Dark Reading · Nov 4, 2026

Google, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet (opens the original source in a new tab)

Google alleges that Android device manufacturer Videostrong ran the operation, which infected set-top boxes and IoT devices with a backdoor to create infrastructure for criminal activity.

via Dark Reading · Nov 4, 2026

Incidents Move Too Fast for Pen & Paper (opens the original source in a new tab)

Organizations may not be ready for completely autonomous communication processes, but there are places where automating information updates would alleviate pressure.

Philippine Migrant Worker Data Likely Leaked in 69GB Government Breach (opens the original source in a new tab)

An unknown operator appears to have exfiltrated SQL Server backups from the Philippine Overseas Employment Administration in under a half hour.

Phishing-Resistant Isn't Enough; Yubico Takes Aim at Identity-Verification Gap (opens the original source in a new tab)

The new YubiID service bridges identity verification with credential enrollment and recovery across existing identity platforms, closing a phishing-resistant authentication gap. Plus: post-quantum YubiKey beta.

Fresh European Fridge Attacks Put Cold-Chain Security in Focus (opens the original source in a new tab)

Beyond food storage, the same combination of Internet connectivity, remote access, and inadequate security practices can put temperature-controlled infrastructure across other critical sectors at risk.

Germany Busts 'Crime-as-a-Service' Investment Fraud Outfit (opens the original source in a new tab)

Authorities seized more than 100 servers and arrested seven as part of a crackdown on a fraud network spanning more than 50 countries.

9 Cyber Awareness Tips That Actually Match Today's Maze of Threats (opens the original source in a new tab)

Practical guidance on safer search, stronger login security, better executive protection, and other habits can reduce enterprise risk.

LLMjacking Emerges as Thriving Cybercriminal Enterprise (opens the original source in a new tab)

Cybercriminals have turned reselling cloud access to LLMs into a lucrative business model, with some victims paying as much as $1 million in resource consumption before access was revoked.

3AM Affiliate Embraces AI-Like Loops in European School Attack (opens the original source in a new tab)

Evidence suggests a model may have generated and revised commands during the ransom gang's breach, though researchers stopped short of claiming full automation.

via Dark Reading · Nov 2, 2026

One Compromised Laptop, Billions Lost: The Binance Attack-Path Warning (opens the original source in a new tab)

The record theft shows how weak system separation, inadequate controls, and untested attack possibilities can turn one breach into systemic loss.

via Dark Reading · Nov 2, 2026

Microsoft's AI Risk Report Misses This Key Detail (opens the original source in a new tab)

The latest Digital Defense Report identifies government agencies as prime targets for AI attacks but doesn't mention that they are broadly being targeted through Microsoft bugs.

via Dark Reading · Nov 2, 2026

PapRAT Cyber-Espionage Campaign Leaves a 'Bitter' Taste in South Asia (opens the original source in a new tab)

Organizations in the region face growing cyberattacks from the known India-linked threat group, which leverages legitimate Windows functionality in three distinct attack chains.

Investors Dish on New Startups & What They'd Back Next (opens the original source in a new tab)

The cybersecurity market is difficult to predict, but a glimpse into the annual DataTribe Challenge shows what's trending and what's not.

Devs Hit by Trojanized Claude Code Extension for Cursor (opens the original source in a new tab)

Two serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development environments (IDEs).

Behind the Scenes of How Operation Blackout Went Down (opens the original source in a new tab)

A recent law enforcement operation to dismantle harmful scam centers was a big success. A threat intelligence expert walks us through what happened and why he wants more of the same.

L’Italia è afflitta da vulnerabilità informatiche, senza una causa chiara (opens the original source in a new tab)

I ricercatori non riescono a spiegare del tutto perché le minacce informatiche in Italia siano così diverse rispetto a quelle di qualsiasi altro Paese.

Undead Software Projects Continue to Raise Security Risks (opens the original source in a new tab)

A security firm patched a decade-old app to prevent the takeover of millions of machines, highlighting that abandoned domains remain a boon to attackers.

As Russia's Cyberwar Evolves, Belarus Steps Forward (opens the original source in a new tab)

The FrostyNeighbor advanced persistent threat (APT) launched a destructive attack in Ukraine and is raising concerns about deeper alignment with Russian cyber objectives.

Anthropic-Themed Phishing Emails Bypass Top Security Tools (opens the original source in a new tab)

Obvious phishing emails with numerous red flags are somehow getting past some of the industry-leading secure email gateway (SEG) products.

Rethinking Cybersecurity Awareness in the AI Era (opens the original source in a new tab)

This installment of the Reporters' Notebook video series discusses some of the trends and topics from Cybersecurity Awareness Month, from using AI for better training to educating next-generation workforces on modern…

Why CTF Competitions May Be More Important Than Ever (opens the original source in a new tab)

As artificial intelligence squeezes early-career learning opportunities, capture-the-flag contests could be one way to help pick up the slack.

Claude Model Builds Exploits Across Major Browsers & OSes (opens the original source in a new tab)

An unreleased version of the AI model has found and chained multiple vulnerabilities in Chrome, Safari, Android, Windows, and Linux, Anthropic says.

Threat Modeling With 4 Simple Questions on a White Board (opens the original source in a new tab)

A four-question exercise that CISOs can use to create a threat model that promises results, without a big spend.