Articles
Practical reading for digital investigators, from the community, our sponsors and the wider industry.
Latest headlines
From Dark Reading, refreshed every hour. Opens the original story in a new tab.
Industry NewsUK Wades Into Tech Sovereignty Amid AI Policy Changes (opens the original source in a new tab)
The UK is betting on domestic AI and cyber investment to reduce reliance on US tech — but security leaders question whether the funding is too fragmented and too late.
via Dark Reading · Nov 6, 2026
Industry NewsAI Gave Your Incident Archive a Second Job (opens the original source in a new tab)
Security records are increasingly being used by vendors to train their models, creating new risks for enterprises.
via Dark Reading · Nov 6, 2026
Industry NewsWhy Europe's Freezer Hacks Spread So Far, So Fast (opens the original source in a new tab)
Europe's supermarket freezer hacks show how security issues can cascade across an industry, disrupting supply chains at scale.
via Dark Reading · Nov 6, 2026
Industry NewsUK Warns Its Critical Infrastructure Faces Grave Risk (opens the original source in a new tab)
Britain's new Labour-led government is making a concerted push to get ahead of the AI risks to its national networks and the industrial complex.
via Dark Reading · Nov 6, 2026
Industry NewsOperação de influência russa tem como alvo generalizado a América Latina (opens the original source in a new tab)
A operação, que contou com o uso de inteligência artificial, utilizou e-mails falsos, documentos governamentais falsificados e a criação de uma organização local para atacar escolas no Peru e no Equador, entre outras…
via Dark Reading · Nov 5, 2026
Industry NewsUS Government Email Systems Open to Abuse Thanks to Typos (opens the original source in a new tab)
Erroneous or outdated DNS records can give attackers surprising powers over organizations' email systems.
via Dark Reading · Nov 5, 2026
Industry NewsWhat We Missed: Knicks Phishing Test Goes Out of Bounds (opens the original source in a new tab)
In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from an ill-conceived phishing simulation to a hacktivist attack on a US government agency.
via Dark Reading · Nov 5, 2026
Industry NewsAPT29's Watering Holes Target Thousands of Mobile Users (opens the original source in a new tab)
After compromising websites, the Russian state-sponsored threat group is fingerprinting victims, then harvesting information from the interesting ones.
via Dark Reading · Nov 5, 2026
Industry NewsSecurityDataPipeline.com Launches as a New Educational Resource for the AI Era (opens the original source in a new tab)
The ungated resource explains how security data pipelines reduce SIEM ingestion costs, preserve detection coverage, and prepare the data layer for AI-driven security operations.
via Dark Reading · Nov 5, 2026
Industry NewsCritical Rails Bug Threatens to Derail Vulnerable Servers (opens the original source in a new tab)
An attacker could write arbitrary files and read sensitive files via images uploaded to the Rails Active Storage ImageMagick integration, possibly positioning a threat actor for lateral movement.
via Dark Reading · Nov 4, 2026
Industry NewsGoogle, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet (opens the original source in a new tab)
Android device manufacturer Videostrong allegedly ran the operation, which infected set-top boxes and IoT devices with a backdoor to create infrastructure for criminal activity.
via Dark Reading · Nov 4, 2026
Industry NewsIncidents Move Too Fast for Pen & Paper (opens the original source in a new tab)
Organizations may not be ready for completely autonomous communication processes, but there are places where automating information updates would alleviate pressure.
via Dark Reading · Nov 4, 2026
Industry NewsPhilippine Migrant Worker Data Likely Leaked in 69GB Government Breach (opens the original source in a new tab)
An unknown operator appears to have exfiltrated SQL Server backups from the Philippine Overseas Employment Administration in under a half hour.
via Dark Reading · Nov 3, 2026
Industry NewsPhishing-Resistant Isn't Enough; Yubico Takes Aim at Identity-Verification Gap (opens the original source in a new tab)
The new YubiID service bridges identity verification with credential enrollment and recovery across existing identity platforms, closing an important authentication gap. Plus: post-quantum YubiKey beta.
via Dark Reading · Nov 3, 2026
Industry NewsFresh European Fridge Attacks Put Cold-Chain Security in Focus (opens the original source in a new tab)
Beyond food storage, the same combination of Internet connectivity, remote access, and inadequate security practices can put temperature-controlled infrastructure across other critical sectors at risk.
via Dark Reading · Nov 3, 2026
Industry NewsGermany Busts 'Crime-as-a-Service' Investment Fraud Outfit (opens the original source in a new tab)
Authorities seized more than 100 servers and arrested seven as part of a crackdown on a fraud network spanning more than 50 countries.
via Dark Reading · Nov 3, 2026
Industry News9 Cyber Awareness Tips That Actually Match Today's Maze of Threats (opens the original source in a new tab)
Practical guidance on safer search, stronger login security, better executive protection, and other habits can reduce enterprise risk.
via Dark Reading · Nov 3, 2026
Industry NewsLLMjacking Emerges as Thriving Cybercriminal Enterprise (opens the original source in a new tab)
Cybercriminals have turned reselling cloud access to LLMs into a lucrative business model, with some victims paying as much as $1 million in resource consumption before access was revoked.
via Dark Reading · Nov 3, 2026
Industry News3AM Affiliate Embraces AI-Like Loops in European School Attack (opens the original source in a new tab)
Evidence suggests a model may have generated and revised commands during the ransom gang's breach, though researchers stopped short of claiming full automation.
via Dark Reading · Nov 3, 2026
Industry NewsOne Compromised Laptop, Billions Lost: The Binance Attack-Path Warning (opens the original source in a new tab)
The record theft shows how weak system separation, inadequate controls, and untested attack possibilities can turn one breach into systemic loss.
via Dark Reading · Nov 2, 2026
Industry NewsMicrosoft's AI Risk Report Misses This Key Detail (opens the original source in a new tab)
The latest Digital Defense Report identifies government agencies as prime targets for AI attacks, but it doesn't mention that they are broadly being targeted through Microsoft bugs.
via Dark Reading · Nov 2, 2026
Industry NewsPapRAT Cyber-Espionage Campaign Leaves a 'Bitter' Taste in South Asia (opens the original source in a new tab)
Organizations in the region face growing cyberattacks from the known India-linked threat group, which leverages legitimate Windows functionality in three distinct attack chains.
via Dark Reading · Nov 2, 2026
Industry NewsInvestors Dish on New Startups & What They'd Back Next (opens the original source in a new tab)
The cybersecurity market is difficult to predict, but a glimpse into the annual DataTribe Challenge shows what's trending and what's not.
via Dark Reading · Oct 30, 2026
Industry NewsDevs Hit by Trojanized Claude Code Extension for Cursor (opens the original source in a new tab)
Two serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development environments (IDEs).
via Dark Reading · Oct 30, 2026