Dark Reading

North Korean APTs Use AI to Enhance IT Worker Scams DPRK worker scams are old hat, but they're still working, thanks to AI tools that help with everything from face swapping to daily emails.

North Korean APTs Use AI to Enhance IT Worker Scams: https://bit.ly/40gaYGo by Nate Nelson

Iran's Cyber-Kinetic War Doctrine Takes Shape Iran has been hacking IP cameras to plan missile strikes against its enemies, showing how cyber and kinetic warfare are fast becoming one in the same.

Iran's Cyber-Kinetic War Doctrine Takes Shape: https://bit.ly/4bu3AgI by Alexander Culafi #DRGlobal

EU Auto Rules Shift Gears on Cybersecurity Standards The European Union is taking new precautions as climate change and cybersecurity threats rise across the automotive industry.

EU Auto Rules Shift Gears on Cybersecurity Standards: https://bit.ly/4rTzVmR by Arielle Waldman #DRTheEdge #RSAC

Cyberattack on Mexico's Government Agencies Highlight AI Threat Using Anthropic and OpenAI's AI systems — and a detailed playbook prompt — cyberattackers gained access to Mexico's agencies and its citizens' data.

Cyberattack on Mexico's Gov't Agencies Highlight AI Threat: https://bit.ly/4bbVurK by Rob Lemos #DRGlobal

Nation-State Actor Embraces AI Malware Assembly Line Pakistan's APT36 threat group has begun using vibe-coding to churn out mediocre malware, but at a scale that could overwhelm defenses.

Nation-State Actor Embraces AI Malware Assembly Line: https://bit.ly/4csgAVb by Jai Vijayan

EU Auto Rules Shift Gears on Cybersecurity Standards The European Union is taking new precautions as climate change and cybersecurity threats rise across the automotive industry.

Latest on @darkreading.bsky.social
#DRTheEdge: EU Auto Rules Shift Gears on Cybersecurity Standards https://zpr.io/6dChPrWZyZcN #darkreading #cybersecurity

Software Development Practices Help Enterprises Tackle Real-Life Risks Organizations can borrow secure-by-design processes to manage non-technical challenges like governance or the inevitable human error.

Latest on @darkreading.bsky.social
#DRTheEdge: Software Development Practices Help Enterprises Tackle Real-Life Risks https://zpr.io/FskyikftRMDA #darkreading #cybersecurity

Tycoon 2FA Goes Boom as Europol, Vendors Bust Phishing Platform The phishing-as-a-service platform was popular among cyber threat actors because of its ability to bypass multi-factor authentication defenses.

Tycoon 2FA Goes Boom as Europol, Vendors Bust Phishing Platform: https://bit.ly/3N6Ve5t by Rob Wright

Cisco Drops 48 New Firewall Vulnerabilities, 2 Critical Edge bugs are so fetch, and Cisco just dropped 50 new ones, including some heavy hitters with 10 out of 10 scores on the CVSS scale.

Cisco Drops 48 New Firewall Vulnerabilities, 2 Critical: https://bit.ly/3MJ1ekQ by Nate Nelson

LatAm Now Faces 2x More Cyberattacks Than the US Much of Central and South America struggles with cybersecurity maturity, and hackers are taking advantage.

LatAm Now Faces 2x More Cyberattacks Than US: https://bit.ly/4rdq766 by Nate Nelson

Threat Hunter Helped Cops Bust Up An African Cybercrime Syndicate Interpol relied on Will Thomas and team to help break up a sprawling cybercrime ring. Here is his story.

Dark Reading Confidential: This Threat Hunter Helped Cops Bust Up An African Cybercrime Syndicate: https://bit.ly/3OYGXbu #DRGlobal #DRConfidential

VMware Aria Operations Bug Exploited, Cloud Resources at Risk Exploitation of the command injection flaw in VMware Aria Operations could grant an attacker broad acess to victims' cloud environments.

VMware Aria Operations Bug Exploited, Cloud Resources at Risk: https://bit.ly/4b7Avqa by Alexander Culafi

China's Silver Dragon Razes Governments in EU, SE Asia The emerging actor, part of the APT41 nexus, gains initial access via phishing and uses legitimate network services to obscure cyber espionage activities.

China's Silver Dragon Razes Governments in EU, SE Asia: https://bit.ly/4b0FqsN by Elizabeth Montalbano

Stranger Things Meets Cybersecurity: Lessons from the Hive Mind Events and concepts from the Stranger Things television series illustrate how enterprises can defend their networks and stay "right side up."

Latest on @darkreading.bsky.social
#DRTheEdge: Stranger Things Meets Cybersecurity: Lessons from the Hive Mind https://zpr.io/zTfjc442RiuN #darkreading #cybersecurity

Vehicle Tire Pressure Sensors Enable Silent Tracking Like many other features and systems in modern cars, tire pressure sensors leak sensitive data that can be abused by threat actors.

Vehicle Tire Pressure Sensors Enable Silent Tracking: https://bit.ly/4r9cxRk by Jai Vijayan

Qualcomm Zero-Day Exploited in Targeted Android Attacks The exploitation of CVE-2026-21385, a high-severity memory corruption flaw, could be tied to commercial spyware or nation-state threat groups.

Qualcomm Zero-Day Exploited in Targeted Android Attacks: https://bit.ly/4cJkdX5 by Alexander Culafi

AI Overload: How to Solve the Workload Identity Crisis Workloads keep getting more complicated, and organizations are struggling to keep up. So what's the play?

AI Agent Overload: How to Solve the Workload Identity Crisis: https://bit.ly/4uplNUr by Alexander Culafi #RSAC

Pro-Iranian Actors Launch Barrage of Cyberattacks Iran and its supporters have taken to cyberspace to retaliate for US-Israeli military action, with an aim to cause economic and physical disruption.

As War Continues, Pro-Iranian Actors Launch Barrage of Cyberattacks: https://bit.ly/4u5N5yL by Elizabeth Montalbano #DRGlobal

Speakeasies to Shadow AI: Banning AI Browsers Will Fail Lessons from history highlight why AI-enabled browsers require controlled enablement.

Latest on @darkreading.bsky.social DR Technology: Speakeasies to Shadow AI: Banning AI Browsers Will Fail https://zpr.io/hzLvnyNLwNUQ #DRTechnology #darkreading #cybersecurity

Quantum-Resistant Data Diode Secures Sensitive Data on Edge Devices, Critical Systems Forward Edge-AI's new Isidore Quantum is a compact, low-power hardware device designed to defend sensitive operational technology endpoints against future quantum attacks.

Latest on @darkreading.bsky.social
#DRTechnology: Quantum-Resistant Data Diode Secures Sensitive Data on Edge Devices, Critical Systems https://zpr.io/k55vVvT55gg7 #darkreading #cybersecurity

Quantum-Resistant Data Diode Secures Sensitive Data on Edge Devices, Critical Systems Forward Edge-AI's new Isidore Quantum is a compact, low-power hardware device designed to defend sensitive operational technology endpoints against future quantum attacks.

Latest on @darkreading.bsky.social DR Technology: Quantum-Resistant Data Diode Secures Sensitive Data on Edge Devices, Critical Systems https://zpr.io/k55vVvT55gg7 #DRTechnology #darkreading #cybersecurity

The Tug-of-War Over Firewall Backlogs in the AI-Driven Development Era Speed and security are historically clashing priorities, but with AI and automation, it's increasingly important that application developers and security teams get on the same page.

Latest on @darkreading.bsky.social
#DRTheEdge: The Tug-of-War Over Firewall Backlogs in the AI-Driven Development Era https://zpr.io/AzV9Wz5Spmth #darkreading #cybersecurity

Critical OpenClaw Vulnerability Exposes AI Agent Risks The now-patched flaw is the latest in a growing string of security issues with the viral AI tool, which has seen rapid adoption among developers.

Critical OpenClaw Vulnerability Exposes AI Agent Risks: https://bit.ly/4rhoHry by Jai Vijayan

30 Alleged Members of 'The Com' Arrested in Project Compass The global law enforcement crackdown, which began in January 2025, also identified nearly 180 members of the notorious cybercriminal collective.

30 Alleged Members of 'The Com' Arrested in Project Compass: https://bit.ly/4aYp43V by Rob Wright

Bug in Google's Gemini AI Panel Opens Door to Hijacking Attackers could have exploited the vulnerability to escalate privileges, violate user privacy while browsing, and access sensitive resources

Bug in Google's Gemini AI Panel Opens Door to Hijacking: https://bit.ly/4cTY7kr by Elizabeth Montalbano

Flaw-Finding AI Assistants Face Criticism for Speed, Accuracy Using AI to find security vulnerabilities holds significant promise, but the initial products fall short of the needs of enterprises and software developers, say experts.

Latest on @darkreading.bsky.social
#DRTechnology: Flaw-Finding AI Assistants Face Criticism for Speed, Accuracy https://zpr.io/Ytk6cWdPHFze #darkreading #cybersecurity

Flaw-Finding AI Assistants Face Criticism for Speed, Accuracy Using AI to find security vulnerabilities holds significant promise, but the initial products fall short of the needs of enterprises and software developers, say experts.

Latest on @darkreading.bsky.social DR Technology: Flaw-Finding AI Assistants Face Criticism for Speed, Accuracy https://zpr.io/Ytk6cWdPHFze #DRTechnology #darkreading #cybersecurity

The Case for Why Better Breach Transparency Matters It's become a standard practice for organizations to disclose the bare minimum about a data breach, or worse -- not disclose the incident at all.

Conference preview: The Case for Why Better Breach Transparency Matters from Elizabeth Montalbano https://www.darkreading.com/cyberattacks-data-breaches/why-better-breach-transparency-matters #cybersecurity #RSAC

Claude Code Security Shows Promise, Not Perfection Claude Code's introduction rippled across the stock market, but researchers and analysts say its impact was overstated, as they peel back the layers.

Claude Code Security Shows Promise, Not Perfection from Alex Culafi https://www.darkreading.com/application-security/claude-code-security-shows-promise-not-perfection #cybersecurity #ai #darkreading

Marquis v. SonicWall Lawsuit Ups the Breach Blame Game When a company gets breached through a third-party security vendor, who bears responsibility? For one FinTech company, the answer is the firewall provider.

Marquis v. SonicWall Lawsuit Ups the Breach Blame Game: https://bit.ly/4r00qpw by Nate Nelson