Articles
Practical reading for digital investigators, from the community, our sponsors and the wider industry.
Latest headlines
From Dark Reading, refreshed every hour. Opens the original story in a new tab.
Industry NewsCISA Announces Enhanced Reporting Form for Cyber Incidents (opens the original source in a new tab)
New questionnaire captures critical data and information that improves the agency’s ability to assess incidents, identify trends and prioritize response actions.
via Dark Reading · Nov 9, 2026
Industry NewsMicrosoft Fixes RCE Bug in Windows Paint After Weeks of Confusion (opens the original source in a new tab)
Last month, Microsoft disclosed a vulnerability in Microsoft Paint, but messaging regarding a patch was unclear.
via Dark Reading · Nov 9, 2026Industry NewsBlack Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to India (opens the original source in a new tab)
Inaugural edition by Informa Markets in India brings together leading researchers, security practitioners and industry decision makers for four days of cutting-edge research, technical exchange and strategic dialogue.
via Dark Reading · Nov 9, 2026
Industry NewsAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on Linux (opens the original source in a new tab)
Attackers can exploit a flaw in Claude's document-processing tool by creating a temporary file that Anthropic's AI assistant can access and run on a user's machine.
via Dark Reading · Nov 9, 2026
Industry NewsPwC's CISO on AI, Robots & What's Next for Security (opens the original source in a new tab)
As AI accelerates change across the enterprise, PwC's James Shira explains why security teams must rethink their approach to risk and adapt their strategies.
via Dark Reading · Nov 9, 2026
Industry NewsNIST: Solo Shouldn't Mean Less Secure (opens the original source in a new tab)
New guidance provides a basic framework for less-technical solo business owners, but it may miss the mark on how to secure technology that requires no human oversight.
via Dark Reading · Nov 9, 2026
Industry NewsUK Wades Into Tech Sovereignty Amid AI Policy Changes (opens the original source in a new tab)
The UK is betting on domestic AI and cyber investment to reduce reliance on US tech — but security leaders question whether the funding is too fragmented and too late.
via Dark Reading · Nov 6, 2026
Industry NewsAI Gave Your Incident Archive a Second Job (opens the original source in a new tab)
Security records are increasingly being used by vendors to train their models, creating new risks for enterprises.
via Dark Reading · Nov 6, 2026
Industry NewsWhy Europe's Freezer Hacks Spread So Far, So Fast (opens the original source in a new tab)
Europe's supermarket freezer hacks show how security issues can cascade across an industry, disrupting supply chains at scale.
via Dark Reading · Nov 6, 2026
Industry NewsUK Warns Its Critical Infrastructure Faces Grave Risk (opens the original source in a new tab)
Britain's new Labour-led government is making a concerted push to get ahead of the AI risks to its national networks and the industrial complex.
via Dark Reading · Nov 6, 2026
Industry NewsOperação de influência russa tem como alvo generalizado a América Latina (opens the original source in a new tab)
A operação, que contou com o uso de inteligência artificial, utilizou e-mails falsos, documentos governamentais falsificados e a criação de uma organização local para atacar escolas no Peru e no Equador, entre outras…
via Dark Reading · Nov 5, 2026
Industry NewsUS Government Email Systems Open to Abuse Thanks to Typos (opens the original source in a new tab)
Erroneous or outdated DNS records can give attackers surprising powers over organizations' email systems.
via Dark Reading · Nov 5, 2026
Industry NewsWhat We Missed: Knicks Phishing Test Goes Out of Bounds (opens the original source in a new tab)
In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from an ill-conceived phishing simulation to a hacktivist attack on a US government agency.
via Dark Reading · Nov 5, 2026
Industry NewsAPT29's Watering Holes Target Thousands of Mobile Users (opens the original source in a new tab)
After compromising websites, the Russian state-sponsored threat group is fingerprinting victims, then harvesting information from the interesting ones.
via Dark Reading · Nov 5, 2026Industry NewsSecurityDataPipeline.com Launches as a New Educational Resource for the AI Era (opens the original source in a new tab)
The ungated resource explains how security data pipelines reduce SIEM ingestion costs, preserve detection coverage, and prepare the data layer for AI-driven security operations.
via Dark Reading · Nov 5, 2026
Industry NewsCritical Rails Bug Threatens to Derail Vulnerable Servers (opens the original source in a new tab)
An attacker could write arbitrary files and read sensitive files via images uploaded to the Rails Active Storage ImageMagick integration, possibly positioning a threat actor for lateral movement.
via Dark Reading · Nov 4, 2026
Industry NewsGoogle, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet (opens the original source in a new tab)
Android device manufacturer Videostrong allegedly ran the operation, which infected set-top boxes and IoT devices with a backdoor to create infrastructure for criminal activity.
via Dark Reading · Nov 4, 2026
Industry NewsIncidents Move Too Fast for Pen & Paper (opens the original source in a new tab)
Organizations may not be ready for completely autonomous communication processes, but there are places where automating information updates would alleviate pressure.
via Dark Reading · Nov 4, 2026
Industry NewsPhilippine Migrant Worker Data Likely Leaked in 69GB Government Breach (opens the original source in a new tab)
An unknown operator appears to have exfiltrated SQL Server backups from the Philippine Overseas Employment Administration in under a half hour.
via Dark Reading · Nov 3, 2026
Industry NewsPhishing-Resistant Isn't Enough; Yubico Takes Aim at Identity-Verification Gap (opens the original source in a new tab)
The new YubiID service bridges identity verification with credential enrollment and recovery across existing identity platforms, closing an important authentication gap. Plus: post-quantum YubiKey beta.
via Dark Reading · Nov 3, 2026
Industry NewsFresh European Fridge Attacks Put Cold-Chain Security in Focus (opens the original source in a new tab)
Beyond food storage, the same combination of Internet connectivity, remote access, and inadequate security practices can put temperature-controlled infrastructure across other critical sectors at risk.
via Dark Reading · Nov 3, 2026
Industry NewsGermany Busts 'Crime-as-a-Service' Investment Fraud Outfit (opens the original source in a new tab)
Authorities seized more than 100 servers and arrested seven as part of a crackdown on a fraud network spanning more than 50 countries.
via Dark Reading · Nov 3, 2026
Industry News9 Cyber Awareness Tips That Actually Match Today's Maze of Threats (opens the original source in a new tab)
Practical guidance on safer search, stronger login security, better executive protection, and other habits can reduce enterprise risk.
via Dark Reading · Nov 3, 2026
Industry NewsLLMjacking Emerges as Thriving Cybercriminal Enterprise (opens the original source in a new tab)
Cybercriminals have turned reselling cloud access to LLMs into a lucrative business model, with some victims paying as much as $1 million in resource consumption before access was revoked.
via Dark Reading · Nov 3, 2026