Skip to contentFreeCyberSocialCon 2026Tue, Dec 8 – Thu, Dec 10 · Online · Live talks on DFIR, OSINT and digital forensicsSee the agenda →

Articles

Practical reading for digital investigators, from the community, our sponsors and the wider industry.

Latest headlines

From Dark Reading, refreshed every hour. Opens the original story in a new tab.

Industry News

ArcticRAT Cybercrime Gang Profiles Victim Finances With AI (opens the original source in a new tab)

The Android malware has expanded from focusing on crypto theft to full device control, and the attackers have added advanced analysis of stolen information.

via Dark Reading · Nov 13, 2026
Industry News

Attackers in Binance Breach Targeted Known Weakness, Missing Controls (opens the original source in a new tab)

Blockchain complexities, such as attacker-deployed sweepers, hobble security controls designed to limit the damage of an exchange compromise.

via Dark Reading · Nov 13, 2026
Industry News

Getting Past the Post-Quantum Cryptography Discovery Phase (opens the original source in a new tab)

Most organizations haven't sorted out their cryptographic estate enough to even know where they'd start with post-quantum cryptography (PQC).

via Dark Reading · Nov 12, 2026
Industry News

Cyber Experts Weigh In: How to Fight Artex & AntiFox (opens the original source in a new tab)

Cybercriminals using agentic pen-testing tools is a proverbial genie out of the bottle at this point, so enterprises need to get a defense plan in place right away.

via Dark Reading · Nov 12, 2026
Industry News

Extortion Group Luna Moth Flits Into Law Firms a Second Time (opens the original source in a new tab)

The cybercriminals are retargeting law firms that refused to pay its first ransom, with a social engineering con aimed at stealing Microsoft access tokens.

via Dark Reading · Nov 12, 2026
Industry News

Inside an AI Attack Against a US Retailer (opens the original source in a new tab)

When hand-typed commands failed to breach a US retailer, the attacker turned to AI-generated scripts, achieving lateral movement in minutes.

via Dark Reading · Nov 12, 2026
Industry News

Chinese AI Project Scouts Spies in Taiwan Chip Industry (opens the original source in a new tab)

The CCP built a Big Data system to scrape reams of information and learn about individuals abroad, to potentially target and exploit them. Think Alice Huang Lite.

via Dark Reading · Nov 11, 2026
Industry News

Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise (opens the original source in a new tab)

The package adds public-private cyber responders, an AI-focused team run by the economic ministry, and more leeway to use the government's new active cyber-defense powers.

via Dark Reading · Nov 12, 2026
Industry News

AIを活用したサイバー攻撃の増加を受け、日本がサイバーセキュリティへの緊急資金拠出を推進 (opens the original source in a new tab)

この対策パッケージには、官民合同のサイバー対応チーム、経済省が主導するAI専門チーム、および政府の新たな能動的サイバー防衛権限の行使に関する裁量の拡大が含まれている。

via Dark Reading · Nov 11, 2026
Industry News

Attackers Say 'Hello' to a Different Scale of Cloud Attack (opens the original source in a new tab)

Researchers dubbed an attack chain Greeter after discovering that attackers deliberately covered their trail by leaving hello messages in logs.

via Dark Reading · Nov 11, 2026
Industry News

AI Raises the Stakes for Cyber Resilience (opens the original source in a new tab)

An organization's ability to quickly recover from a business disruption will be a competitive advantage in an era of AI-driven threats and business enablement.

via Dark Reading · Nov 11, 2026
Industry News

As Test Takers Turn to AI for Answers, Exam Security Must Catch Up (opens the original source in a new tab)

It's hard to detect whether someone is using artificial intelligence (AI) to cheat on IT certification exams, but new tools and processes are emerging to boost trust.

via Dark Reading · Nov 11, 2026
Industry News

N-able Takes N-central Platform Offline After Discovery of 33 Flaws (opens the original source in a new tab)

The RMM provider also released a hotfix as a recommended mitigation to address public exploits for the alleged zero-days, which allow for attacker takeover.

via Dark Reading · Nov 11, 2026
Industry News

November Patch Tuesday: An Overflowing Cornucopia of CVEs (opens the original source in a new tab)

Microsoft serves up an actively exploited Outlook zero-day, and a wave of critical Exchange, SharePoint, Windows Search, and LDAP bugs that exhausted defenders need to prioritize fast.

via Dark Reading · Nov 10, 2026
Industry News

Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon (opens the original source in a new tab)

Forks of the open source Artex framework, along with 45 similar pen-testing tools, remain capable of executing credential attacks and cloud breaches at machine speed across multiple industries.

via Dark Reading · Nov 10, 2026
Industry News

F-Secure Identifies 26 Ways AI Can Harm Consumers, and Where to Stop Them (opens the original source in a new tab)

New AI Harms Taxonomy traces how harm moves through AI systems, from misleading chatbot answers to compromised autonomous agents, and identifies where defenses can intervene.

via Dark Reading · Nov 10, 2026
Industry News

Checkmarx Appoints Kobi Sivilya as Chief Information Security Officer (opens the original source in a new tab)

Sivilya brings deep cybersecurity and technology leadership to Checkmarx as AI transforms software development.

via Dark Reading · Nov 10, 2026
Industry News

How to Assess OT Incident Response Preparedness (opens the original source in a new tab)

Cloud Range's free 28-question OT Cyber Readiness Assessment helps organizations identify gaps in operational technology (OT) incident response.

via Dark Reading · Nov 10, 2026
Industry News

AI Coding Agents Leak Thousands of Secrets to GitHub (opens the original source in a new tab)

A command in Claude Code inadvertently saves files with credentials and other sensitive data to public Git repositories, creating security gaps for organizations.

via Dark Reading · Nov 10, 2026
Industry News

AI Makes Reverse Engineering Mainstream Software & Malware Far Easier (opens the original source in a new tab)

Researchers unpacked, mapped, and recreated complex software and the Turla malware, raising opportunities and concerns for organizations and cybersecurity analysts.

via Dark Reading · Nov 10, 2026
Industry News

People Are Getting Weird About AI (opens the original source in a new tab)

Dark Reading Confidential Episode 22: You can love AI without being blind to cybersecurity being sacrificed for utility. The tendency for humans to anthropomorphize the conversations and interactions we're having with…

via Dark Reading · Nov 9, 2026
Industry News

CISA Announces Enhanced Reporting Form for Cyber Incidents (opens the original source in a new tab)

New questionnaire captures critical data and information that improves the agency’s ability to assess incidents, identify trends and prioritize response actions.

via Dark Reading · Nov 9, 2026
Industry News

Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion (opens the original source in a new tab)

Last month, Microsoft disclosed a vulnerability in Microsoft Paint, but messaging regarding a patch was unclear.

via Dark Reading · Nov 9, 2026
Industry News

Black Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to India (opens the original source in a new tab)

Inaugural edition by Informa Markets in India brings together leading researchers, security practitioners and industry decision makers for four days of cutting-edge research, technical exchange and strategic dialogue.

via Dark Reading · Nov 9, 2026