Dark Reading

Dark Reading

@darkreading.bsky.social

One of the most widely read and trusted cybersecurity news sites, providing IT security professionals informed insights into the latest news and trends.

1.6K followers20 following1.2K posts

As AI-powered phishing, advanced social engineering & cloud concentration risks reshape the threat landscape, cyber insurers are taking a more active role in cybersecurity itself. Read why underwriting alone may no longer be enough. https://bit.ly/3U8pgcB #CyberInsurance #CyberRisk #Cybersecurity

bit.lyCyber Insurance's New Reality: Underwriting Isn't EnoughCyber insurers are tightening requirements, monitoring risk, and offering security services as threats evolve.

Threat actors manipulate search rankings to push fake software downloads, phishing sites & credential theft campaigns in front of users. In today's video, Dark Reading's Alexander Culafi explains what SEO poisoning is. https://bit.ly/4iezzUs #CybersecurityAwarenessMonth #CyberMonth

bit.lySpot SEO Poisoning Red Flags | Dark Reading posted on the topic | LinkedInThe first search result isn't always what it seems. SEO poisoning can manipulate search results to trick users into visiting malicious websites or downloading dangerous software. Dark Reading's Alexa...

French cloud giant OVHcloud suffered a GitHub repo compromise and supply chain attack. The good news? The poisoned code was only downloaded about 250 times. The bad news? The developer account used to access the repo was under attackers’ control for 7 months. https://bit.ly/4iASKJi

bit.lyOVHcloud GitHub Compromise Tied to GlassWorm Threat ActorsA developer's GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users.

"I always joke that it's not the doors in your house; it's a small one that you forgot about that ends up being your biggest risk." —Renee Guttmann Guttmann was one of four panelists who joined a Dark Reading roundtable on shifting #SDLC security focus. https://bit.ly/4z2iMew By Arielle Waldman

bit.lyClose Identity Gaps in Software Development Before Unleashing AIArtificial intelligence complicates secure software development, but CISOs offer a path ahead during a Dark Reading roundtable.

Not every "critical" vulnerability is actually critical. Experts warn that organizations are drowning in CVSS alerts — and need better insight into real exploitation risk, not just subjective severity scores. #vulnerabilitymanagement #riskmanagement https://bit.ly/4io4ZsB By Arielle Waldman

darkreading.comVulnerability Management: Context Over the ScoreOrganizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.

This Cybersecurity Awareness Month, we want to hear from you. Head to Dark Reading Polls to weigh in on our latest question & see what your peers are thinking about awareness training, password security, AI & other top security issues: https://bit.ly/3RUX9wt #CybersecurityAwarenessMonth #DarkReading

bit.lyDark Reading PollsWant to participate in our current poll or want to know what your cybersecurity peers think about key topics? Check out our polls page and find out!

You've probably seen suspicious ads from time to time on Facebook and Instagram. But recent research shows the risk of scams & malicious ads is higher on the platforms than you might think. Video by Rob Wright, senior news director. https://bit.ly/4juu5Y3 #CybersecurityAwarenessMonth. #CyberMonth

bit.lyVerify Senders Before Clicking Links | Dark Reading posted on the topic | LinkedInThink you can spot a scam? So did Rob Wright, cybersecurity reporter and senior news director at Dark Reading. For Cybersecurity Awareness Month, remember: spoofed emails and phishing scams can look ...

AI agents are now breaching third-party systems during testing, but the harder question is what comes next: accountability. As frontier models escape guardrails & access external organizations, experts say responsibility remains human, even if legal liability is less settled. https://bit.ly/3VP9FiC

bit.lyWhen AI Agents Commit Breaches, Humans May Not Be Held LiableAs agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.

"Companies need to focus on what adversaries are actually doing, rather than guessing at what they might do." —Jeremiah Grossman Instead of chasing every flaw, security teams are learning to narrow millions down to the five that actually matter. Here's how they're doing it. https://bit.ly/4io4ZsB

darkreading.comVulnerability Management: Context Over the ScoreOrganizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.

Dark patterns aren't always obvious. Deceptive designs trick users into clicking without thinking, letting threat actors steal sensitive data. Watch for pre-checked boxes, fake urgency & confusing opt-outs. #CybersecurityAwarenessMonth #SocialEngineering https://bit.ly/4B93cPy

bit.ly#cybersecurityawarenessmonth #cybersecuritymonth | Dark ReadingDark patterns are deceptive design tricks built to manipulate users' clicks. Here are some tips from Dark Reading's Arielle Waldman on how to spot them before scammers leverage them against you or you...