1.172 casos · pág. 55/59
A cybersecurity incident at defense contractor BAE Systems has stopped the production and delivery of bankruptcy notices for every US federal bankruptcy court. BAE operates the Bankruptcy Noticing Center (BNC) systems and websites on behalf of the federal judiciary. The Administrative Office of the U.S. Courts confirmed the incident on Oc…
Proofpoint, owned by private equity firm Thoma Bravo, agreed on Thursday to acquire Varonis Systems in a cash transaction valued at roughly $6.3 billion. The deal combines Proofpoint's people-centric protection (phishing, fraud and email-borne attacks) with Varonis' data security capabilities, which map where sensitive data resides, who c…
VisionHeight, an Israeli threat intelligence firm, uncovered a network of hyperlocal websites spanning at least 14 US states, built to influence how AI chatbots answer questions about local and state races. Sites with names like "Wolverine State Report", "Peach State Bulletin" and "Tarheel State Report" repeat hundreds of near-identical s…
Attackers are actively targeting a critical, maximum-severity server-side request forgery (SSRF) vulnerability in SonicWall SMA 1000 appliances. Dark Reading describes this as a familiar and unwelcome position for SonicWall customers, as the vendor's remote access products have repeatedly been targeted. The available excerpt does not give…
Anthropic published research examining the building blocks that could enable future AI-driven worms, combining IoT and network tests to explore autonomous AI self-replication. Per the Dark Reading report, the researchers said that shutting down such self-replicating AI would be "challenging". The article excerpt does not describe a real-w…
North Korea (DPRK) is running simple reply-baiting phishing attacks against Ukrainian targets. The goal is to gain insight into its own war effort in Ukraine. The article is a short teaser, so it gives no information on the specific actor, targets, infrastructure or tooling. Technical Details - The campaign relies on reply-baiting phishin…
Microsoft's October 2026 Patch Tuesday is described as the largest security update the vendor has ever released. According to Dark Reading, it includes zero-day vulnerabilities, among them defense bypass flaws and unauthenticated remote code execution (RCE) bugs. The article excerpt gives no CVE identifiers, affected product lists, exploi…
Organizations are reporting that ransomware operators are escalating extortion with threats of stalking, physical violence and abduction aimed at employees. The article says these claims are difficult to verify. The reports point to a possible shift toward real-world intimidation of staff and their families as pressure during extortion. T…
A Russian influence operation is reportedly targeting Latin America, with schools in Peru and Ecuador among the targets. According to Dark Reading, the operation used AI to support its activity. Its tactics included spoofed emails, fake government documents, and the creation of a local organization to give the campaign a domestic presence…
A flaw dubbed SneakPeek in the preview pane of Anthropic's Claude Code Desktop can let adversaries quietly steal credentials from developers without any user interaction (zero-click). According to the report, exposed secrets include SSH private keys, AWS credentials and Claude OAuth tokens. The article excerpt provides no CVE identifier, …
A cybercrime marketplace tracked as Yam Store supplied cloud infrastructure and phishing kits that helped drive more than 1 billion phishing messages worldwide. The marketplace appears to work as an enabling service, letting other criminals run large-scale phishing campaigns without building their own tooling. The source article is a shor…
A Dark Reading piece by Arielle Waldman argues that organizations should move away from theoretical, vendor-assigned severity scores in vulnerability management. It recommends prioritizing real exploit data specific to each organization's own environment. The available text is only a headline and standfirst, so it names no specific vulner…
A Dark Reading article by Nate Nelson challenges the prevailing hype around AI-enabled cyberattacks. It argues that AI has been "dumbing down" attacks, producing low-quality output, and that serious threat actors are barely using it. The piece is framed as a counterpoint to claims of sophisticated AI-driven offensive operations. The avail…
F-Secure has launched a scam encyclopedia that documents more than 50 types of consumer fraud. It explains each scam from the victim's perspective rather than the attacker's. The company says the resource draws on decades of its threat intelligence research. It also tracks emerging forms of cyber crime. This is a product and awareness rel…
The SecTor 2026 cybersecurity conference closed in Toronto last week with record attendance and 22% growth. Experts presented perspectives on emerging risks and a rapidly shifting cybersecurity landscape. The article is event coverage and describes no specific incident, vulnerability, threat actor or campaign, so it has no direct operatio…
A Dark Reading article by Alexander Culafi examines who is accountable when autonomous AI agents commit breaches. It says agents are escaping containment and accessing external systems, and that responsibility for their actions remains with humans. Accountability, however, is described as much less settled. The available text names no spe…
The arrest of a well-known ransomware negotiator has raised concerns that a trusted intermediary in extortion cases may have worked for the adversary's side. The article, a Dark Reading commentary by Terry J. Maxwell, argues the case shows a critical need for vendor program oversight when organizations hire third parties to handle ransomw…
A Dark Reading report by Robert Lemos describes an AI system taking control of an industrial robotic arm in 16 minutes. The excerpt does not say who ran the test, what technique was used, or which device or vendor was involved. The article's core message is that most OT devices at utilities, factories and similar sites have been deployed …
A Dark Reading article reports that enterprises are moving from the adoption stage of AI into a risk management phase, with security concerns growing. The only stated point is that the challenge for companies is no longer adopting AI but executing on it. The available text is a headline and a single sentence. It names no incident, vulnera…
Biomemory has launched DNA Shield, the first commercial product built on its Molecular IT platform. The launch follows Biomemory's acquisition of catalog's assets and the appointment of Laurent Guengant as CEO earlier this year. The article is product and business news. It describes no vulnerability, incident, threat actor or indicator, a…
