General cybersecurity industry news, market trends, and analysis
MuddyWater used Teams phishing in 2026 to steal credentials, enabling stealthy data exfiltration and persistence without encryption.
CyberStars Awards 2026 launched as a global program recognizing cybersecurity excellence across products, companies, and professionals.
As part of Dark Reading's 20th anniversary celebration, its staff looks back on 20 of the biggest newmaking events from the past two decades that shaped our industry and the risk landscape for today's security teams.
Gavril Sandu, 53, was indicted in 2017, but was arrested and extradited to the United States only in 2026.
AI agents outpace IAM governance as 50% identity activity stays unseen, increasing enterprise security and compliance risks.
In hard-to-detect attacks, hackers are dropping the CloudZ RAT and a fresh plugin, Pheno, to hijack the Windows-based bridge between PCs and smartphones.
The agency has issued guidance to help critical infrastructure operators prepare for cyberattacks by foreign threat actors.
The persistent, evasive implant provides remote access, surveillance, and credential exfiltration capabilities.
Google expands Android Binary Transparency after May 1, 2026 to verify app authenticity, reducing supply chain attack risks.
CloudZ RAT exploits Phone Link since Jan 2026, stealing credentials and OTPs via Pheno plugin, bypassing 2FA protections.
While trojanized Daemon Tools versions were installed worldwide, a sophisticated backdoor was dropped only on a dozen systems.
Containing fixes for critical-severity vulnerabilities, the monthly rollouts will focus on addressing priority issues faster.
