Articles
Practical reading for digital investigators, from the community, our sponsors and the wider industry.
Latest headlines
From Dark Reading, refreshed every hour. Opens the original story in a new tab.
Industry NewsSo Many AI Security Benchmarks, But None Tell the Whole Story (opens the original source in a new tab)
Measuring AI model security gets complex, fast, thanks to a growing patchwork of benchmarks targeting different variables in the equation. But none replace testing against your own code and workflows.
via Dark Reading · Oct 26, 2026
Industry NewsRisks & Rewards: How AI Is Redefining the CISO's Role (opens the original source in a new tab)
Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks.
via Dark Reading · Oct 26, 2026
Industry NewsIn-the-Wild Attack Abuses AI Agents' Trust in Markdown (opens the original source in a new tab)
A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions.
via Dark Reading · Oct 26, 2026
Industry News'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets (opens the original source in a new tab)
An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.
via Dark Reading · Oct 26, 2026
Industry News10 Software Security Practices Built for the Next 250 Years (opens the original source in a new tab)
This Cybersecurity Awareness Month's theme, Securing the Next 250, asks us to look beyond vulnerabilities and consider what will make our digital systems resilient for generations.
via Dark Reading · Oct 26, 2026
Industry NewsTrust Is Not What It Seems — and Fraudsters Are Counting on It (opens the original source in a new tab)
Threat actors don't need to rely on malware to breach organizations anymore. They're simply calling help desks and politely asking for access, with a little help from artificial intelligence.
via Dark Reading · Oct 23, 2026
Industry NewsExposed to PHP2Shell? Cyber Experts Weigh in With Advice (opens the original source in a new tab)
Fixing the critical PHP flaws is not as simple as clicking Update. Here's how to assess your risk, and what you can do to protect yourself.
via Dark Reading · Oct 23, 2026
Industry NewsAI Tools Are Generating Massive Attacks for Little Cost (opens the original source in a new tab)
One campaign targets 105 sites using open-weight models; in another, public models gained full domain control for $12. Cyber-defense will have to change.
via Dark Reading · Oct 23, 2026
Industry NewsWhy Caribbean Threats Cascade Into Global Cyber-Risk (opens the original source in a new tab)
The region is demonstrating what happens when exploits accelerate but assurance does not.
via Dark Reading · Oct 23, 2026
Industry NewsCyber Insurance's New Reality: Underwriting Isn't Enough (opens the original source in a new tab)
Rising AI, social engineering, and cloud risks are pushing carriers beyond risk transfer and deeper into cybersecurity itself.
via Dark Reading · Oct 23, 2026
Industry NewsAI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security Stack (opens the original source in a new tab)
Microsoft's Project Perception adds Guardian Agents to monitor and contain anomalous AI agents, but experts warn that policing unpredictable agents with other agents may compound — not contain — the risk.
via Dark Reading · Oct 23, 2026
Industry NewsState Bank of India Suffers a Customer PII Data Leak (opens the original source in a new tab)
Relatively small data breaches in India can turn quite serious, thanks to a sophisticated underground market for trading PII.
via Dark Reading · Oct 22, 2026
Industry NewsMicrosoft Links Storm-0940 to ConnectWise Supply Chain Attack (opens the original source in a new tab)
The China-linked actor used an AI-enabled penetration-testing tool to automate and accelerate its attack on more than 2,200 tenants.
via Dark Reading · Oct 22, 2026
Industry NewsWhat We Missed: Feds Lasso Texas Laptop Farms (opens the original source in a new tab)
In this video, Dark Reading editors discuss some of the news they didn't get a chance to cover, from busting up North Korea's stateside infrastructure in Operation Lonestar Justice to Staples' gift card bonanza.
via Dark Reading · Oct 22, 2026
Industry NewsLes supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour (opens the original source in a new tab)
Des centaines de magasins ont subi des pertes se chiffrant en millions d'euros parce qu'ils avaient fait appel à des tiers pour gérer le micrologiciel OT obsolète qui pilotait leurs systèmes de climatisation.
via Dark Reading · Oct 22, 2026
Industry NewsAs AI Risks Grow, Insurers Split on Covering the Damage (opens the original source in a new tab)
Some build specialized agentic AI coverage, while major carriers quietly exclude it — leaving enterprises exposed without their knowledge.
via Dark Reading · Oct 22, 2026
Industry NewsUAE Transitions 50% of Government Services to Agentic AI (opens the original source in a new tab)
The United Arab Emirates says it's creating a foundation of security and safety as it transforms its public service footprint.
via Dark Reading · Oct 22, 2026
Industry NewsTiDB Breach Exposes Flawed Cloud Security Assumptions (opens the original source in a new tab)
Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the unseen information comes to light.
via Dark Reading · Oct 21, 2026
Industry NewsMarvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security (opens the original source in a new tab)
The effort is aimed at standardizing a NIST FIPS 140-3 Level 3 integrated HSM for cloud and hyperscale data center infrastructure.
via Dark Reading · Oct 21, 2026Industry NewsCloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens (opens the original source in a new tab)
Research finds that, among respondents experiencing data loss, only 16% said DLP blocked their most significant incidents before data left the organization.
via Dark Reading · Oct 21, 2026
Industry News'PHP2Shell' Bugs Signal Red Alert for Security Industry (opens the original source in a new tab)
Security teams are scrambling to remediate two critical PHP vulnerabilities following leaked details and reports of exploitation attempts.
via Dark Reading · Oct 21, 2026
Industry NewsOVHcloud GitHub Compromise Tied to GlassWorm Threat Actors (opens the original source in a new tab)
A developer's GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users.
via Dark Reading · Oct 21, 2026Industry NewsOptiv Launches CyberBOT Cybersecurity Awareness Training Program (opens the original source in a new tab)
Hands-on sessions provide educators, nonprofits, and community leaders with an accessible resource to foster year-round cyber awareness and build more resilient communities.
via Dark Reading · Oct 21, 2026Industry NewsSurvey Finds High-Profile Executives Feel Untouchable as Digital Exposure Turns Into Physical Risk (opens the original source in a new tab)
360 Privacy finds more than 8 in 10 security and wealth professionals say cybersecurity and physical security can no longer be separated.
via Dark Reading · Oct 21, 2026