State Bank of India (SBI) has suffered a leak of customer personally identifiable information (PII), according to Dark Reading. The article's available text is limited to a teaser. It says relatively small data breaches in India can become serious because a sophisticated underground market exists for trading PII. The scale of the leak, th…
Hundreds of EU grocery stores reportedly lost millions of euros because the outdated OT firmware running their cooling and climate-control (HVAC/refrigeration) systems was left unpatched. The stores had outsourced management of these systems to third-party providers (darkreading.com). The first report was published on 2026-10-15 and a fol…
A Dark Reading video roundup mentions the US federal takedown of laptop farms in Texas, dubbed "Operation Lonestar Justice". The farms are described as North Korea's stateside infrastructure. This is the kind of setup typically associated with North Korean remote IT worker schemes, though the article does not state that. The segment also …
A TiDB breach is being used to illustrate flawed assumptions about cloud security. The article argues that cloud providers may be storing sensitive customer data without either the provider or the customer knowing it. When such a provider is breached, that hidden data is exposed. The excerpt gives no details on the breach itself, such as …
A former OpenAI engineer with reported Saudi ties was detained after allegedly planting a secret recording device in a conference room at OpenAI's headquarters. Dark Reading presents the case as an example of a preventable insider threat vector. The available text is only a short teaser, so it gives no detail on the device, how long it wa…
Researchers infiltrated a large-scale tech support scam operation that impersonates Microsoft. The operation relies on a malicious traffic distribution system (TDS) run by a Russian organization. It also abuses thousands of Cloudflare links to route victims to scam content. The article snippet gives no victim counts, losses or technical i…
Edward Dubrovsky, a longtime cybersecurity executive described by Dark Reading as a prominent ransomware negotiator, was arrested and charged in Pennsylvania last week with conspiracy to extort money. The available article text is a brief summary and does not describe the alleged scheme, the victims, the amounts involved or any link to sp…
Anthropic published research examining the building blocks that could enable future AI-driven worms, combining IoT and network tests to explore autonomous AI self-replication. Per the Dark Reading report, the researchers said that shutting down such self-replicating AI would be "challenging". The article excerpt does not describe a real-w…
North Korea (DPRK) is running simple reply-baiting phishing attacks against Ukrainian targets. The goal is to gain insight into its own war effort in Ukraine. The article is a short teaser, so it gives no information on the specific actor, targets, infrastructure or tooling. Technical Details - The campaign relies on reply-baiting phishin…
Organizations are reporting that ransomware operators are escalating extortion with threats of stalking, physical violence and abduction aimed at employees. The article says these claims are difficult to verify. The reports point to a possible shift toward real-world intimidation of staff and their families as pressure during extortion. T…
A Russian influence operation is reportedly targeting Latin America, with schools in Peru and Ecuador among the targets. According to Dark Reading, the operation used AI to support its activity. Its tactics included spoofed emails, fake government documents, and the creation of a local organization to give the campaign a domestic presence…
The arrest of a well-known ransomware negotiator has raised concerns that a trusted intermediary in extortion cases may have worked for the adversary's side. The article, a Dark Reading commentary by Terry J. Maxwell, argues the case shows a critical need for vendor program oversight when organizations hire third parties to handle ransomw…
A Dark Reading report by Robert Lemos describes an AI system taking control of an industrial robotic arm in 16 minutes. The excerpt does not say who ran the test, what technique was used, or which device or vendor was involved. The article's core message is that most OT devices at utilities, factories and similar sites have been deployed …
Campaigns that impersonate popular AI brands, notably Claude and ChatGPT, are on the rise. They typically use ClickFix-like social engineering tactics to target unsuspecting enterprise employees, with developers described as being at particular risk. The article, available only as a short excerpt, gives no details on payloads, infrastruct…
Copyright takedown requests tied to OnlyFans and other adult content creators are exposing how attackers exploit vulnerable university and government websites to manipulate search results. The takedown notices act as a visible indicator of compromised sites that were abused to host or promote content for search engine manipulation. UpGuar…