Articles
Practical reading for digital investigators, from the community, our sponsors and the wider industry.
Latest headlines
From Dark Reading, refreshed every hour. Opens the original story in a new tab.
Industry NewsNovember Patch Tuesday: An Overflowing Cornucopia of CVEs (opens the original source in a new tab)
Microsoft serves up an actively exploited Outlook zero-day, and a wave of critical Exchange, SharePoint, Windows Search, and LDAP bugs that exhausted defenders need to prioritize fast.
via Dark Reading · Nov 10, 2026
Industry NewsArtex: The AI Pen-Test Tool Hackers Turned Into a Weapon (opens the original source in a new tab)
Forks of the open source Artex framework, along with 45 similar pen-testing tools, remain capable of executing credential attacks and cloud breaches at machine speed across multiple industries.
via Dark Reading · Nov 10, 2026
Industry NewsF-Secure Identifies 26 Ways AI Can Harm Consumers, and Where to Stop Them (opens the original source in a new tab)
New AI Harms Taxonomy traces how harm moves through AI systems, from misleading chatbot answers to compromised autonomous agents, and identifies where defenses can intervene.
via Dark Reading · Nov 10, 2026Industry NewsCheckmarx Appoints Kobi Sivilya as Chief Information Security Officer (opens the original source in a new tab)
Sivilya brings deep cybersecurity and technology leadership to Checkmarx as AI transforms software development.
via Dark Reading · Nov 10, 2026Industry NewsHow to Assess OT Incident Response Preparedness (opens the original source in a new tab)
Cloud Range's free 28-question OT Cyber Readiness Assessment helps organizations identify gaps in operational technology (OT) incident response.
via Dark Reading · Nov 10, 2026
Industry NewsAI Coding Agents Leak Thousands of Secrets to GitHub (opens the original source in a new tab)
A command in Claude Code inadvertently saves files with credentials and other sensitive data to public Git repositories, creating security gaps for organizations.
via Dark Reading · Nov 10, 2026
Industry NewsAI Makes Reverse Engineering Mainstream Software & Malware Far Easier (opens the original source in a new tab)
Researchers unpacked, mapped, and recreated complex software and the Turla malware, raising opportunities and concerns for organizations and cybersecurity analysts.
via Dark Reading · Nov 10, 2026
Industry NewsPeople Are Getting Weird About AI (opens the original source in a new tab)
Dark Reading Confidential Episode 22: You can love AI without being blind to cybersecurity being sacrificed for utility.
via Dark Reading · Nov 9, 2026Industry NewsCISA Announces Enhanced Reporting Form for Cyber Incidents (opens the original source in a new tab)
New questionnaire captures critical data and information that improves the agency’s ability to assess incidents, identify trends and prioritize response actions.
via Dark Reading · Nov 9, 2026
Industry NewsMicrosoft Fixes RCE Bug in Windows Paint After Weeks of Confusion (opens the original source in a new tab)
Last month, Microsoft disclosed a vulnerability in Microsoft Paint, but messaging regarding a patch was unclear.
via Dark Reading · Nov 9, 2026Industry NewsBlack Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to India (opens the original source in a new tab)
Inaugural edition by Informa Markets in India brings together leading researchers, security practitioners and industry decision makers for four days of cutting-edge research, technical exchange and strategic dialogue.
via Dark Reading · Nov 9, 2026
Industry NewsAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on Linux (opens the original source in a new tab)
Attackers can exploit a flaw in Claude's document-processing tool by creating a temporary file that Anthropic's AI assistant can access and run on a user's machine.
via Dark Reading · Nov 9, 2026
Industry NewsPwC's CISO on AI, Robots & What's Next for Security (opens the original source in a new tab)
As AI accelerates change across the enterprise, PwC's James Shira explains why security teams must rethink their approach to risk and adapt their strategies.
via Dark Reading · Nov 9, 2026
Industry NewsNIST: Solo Shouldn't Mean Less Secure (opens the original source in a new tab)
New guidance provides a basic framework for less-technical solo business owners, but it may miss the mark on how to secure technology that requires no human oversight.
via Dark Reading · Nov 9, 2026
Industry NewsUK Wades Into Tech Sovereignty Amid AI Policy Changes (opens the original source in a new tab)
The UK is betting on domestic AI and cyber investment to reduce reliance on US tech — but security leaders question whether the funding is too fragmented and too late.
via Dark Reading · Nov 6, 2026
Industry NewsAI Gave Your Incident Archive a Second Job (opens the original source in a new tab)
Security records are increasingly being used by vendors to train their models, creating new risks for enterprises.
via Dark Reading · Nov 6, 2026
Industry NewsWhy Europe's Freezer Hacks Spread So Far, So Fast (opens the original source in a new tab)
Europe's supermarket freezer hacks show how security issues can cascade across an industry, disrupting supply chains at scale.
via Dark Reading · Nov 6, 2026
Industry NewsUK Warns Its Critical Infrastructure Faces Grave Risk (opens the original source in a new tab)
Britain's new Labour-led government is making a concerted push to get ahead of the AI risks to its national networks and the industrial complex.
via Dark Reading · Nov 6, 2026
Industry NewsOperação de influência russa tem como alvo generalizado a América Latina (opens the original source in a new tab)
A operação, que contou com o uso de inteligência artificial, utilizou e-mails falsos, documentos governamentais falsificados e a criação de uma organização local para atacar escolas no Peru e no Equador, entre outras…
via Dark Reading · Nov 5, 2026
Industry NewsUS Government Email Systems Open to Abuse Thanks to Typos (opens the original source in a new tab)
Erroneous or outdated DNS records can give attackers surprising powers over organizations' email systems.
via Dark Reading · Nov 5, 2026
Industry NewsWhat We Missed: Knicks Phishing Test Goes Out of Bounds (opens the original source in a new tab)
In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from an ill-conceived phishing simulation to a hacktivist attack on a US government agency.
via Dark Reading · Nov 5, 2026
Industry NewsAPT29's Watering Holes Target Thousands of Mobile Users (opens the original source in a new tab)
After compromising websites, the Russian state-sponsored threat group is fingerprinting victims, then harvesting information from the interesting ones.
via Dark Reading · Nov 5, 2026Industry NewsSecurityDataPipeline.com Launches as a New Educational Resource for the AI Era (opens the original source in a new tab)
The ungated resource explains how security data pipelines reduce SIEM ingestion costs, preserve detection coverage, and prepare the data layer for AI-driven security operations.
via Dark Reading · Nov 5, 2026
Industry NewsCritical Rails Bug Threatens to Derail Vulnerable Servers (opens the original source in a new tab)
An attacker could write arbitrary files and read sensitive files via images uploaded to the Rails Active Storage ImageMagick integration, possibly positioning a threat actor for lateral movement.
via Dark Reading · Nov 4, 2026