Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This threat intelligence report from Check Point Research summarizes the top attacks and breaches for the week of October 5, 2026, including a phishing attack on Arizona courts, a data breach at Japanese car-sharing service Times Car, and a ransomware attack on South Africa's air navigation provider.
This article announces that tenfold has added two new features—shared content governance and real-time event auditing—to its free Community Edition identity governance tool for small organizations.
This article reports that Japanese media group Nikkei disclosed a cyberattack where an employee email account was compromised, potentially exposing journalistic sources and sensitive communications.
This article reports the arrest of the suspected developer of Ploutus malware, which was used in ATM jackpotting attacks that stole millions of dollars across the United States. The Department of Justice made the announcement, highlighting the ongoing efforts to combat cybercrime targeting financial systems.
This article discusses how AI-powered attacks are changing the cybersecurity landscape by being fast, relentless, and automated. It highlights results from a Dark Reading reader poll showing that security teams are prioritizing how to keep up with these evolving threats.
This article from FortiGuard Labs analyzes ClingSTUN, a Linux backdoor that exploits vulnerable devices and misuses public STUN servers to support a proxy backdoor. The malware abuses STUN infrastructure to hide its communications, making it harder to detect.
This article describes a proof-of-concept called BigDiskBuster that can stop Microsoft Defender from receiving updates by exhausting disk space. Published on GitHub by MSNightmare, it shows that Defender does not need to be disabled; simply filling the disk prevents update installation.
Denmark is investigating a data breach that affected around 8.8 million people after unauthorized access to the national population register. The breach involves a critical government database containing personal information, posing risks of identity theft and fraud.
This article explains why the expanding credential layer is outpacing security visibility, citing GitHub commit growth and GitGuardian's secret detection statistics. It argues that detection is the necessary first stage of credential security, before remediation and prevention can occur.