Dark Reading (@DarkReading)

May 26

Tim Wilson, co-founder and former editor-in-chief of Dark Reading, passed away five years ago in November. As Dark Reading enters its third decade, we pause to celebrate and honor Wilson's instrumental role in building and elevating the media site. Read the full story here: bit.ly/4wSgoq2 #DarkReading20 @InformaTTGT

10,587

Dark Reading · Sep 25, 2026 · 8:18 PM UTC

Stopping IT Worker Scams Requires Revamped HR Process darkreading.com/cyber-risk/s… by Robert Lemos

Stopping IT Worker Scams Requires Revamped HR Process

Training human-resource managers in the latest tactics and warning signs helps blunt the threat, but automated analysis can help even more.

6,630

Dark Reading · Sep 25, 2026 · 7:42 PM UTC

What We Missed: Google Gemini Joins the AI Escape Party bit.ly/46FqBdD by Rob Wright and Alexander Culafi

What We Missed: Google Gemini Joins the AI Escape Party

In this video, Dark Reading editors discuss some of the news they didn't get a chance to cover, including Google Gemini models breaking containment.

5,456

Dark Reading · Sep 25, 2026 · 7:22 PM UTC

AI Sandbox Escapes: Why Forensic Readiness Matters More Than Containment bit.ly/4xEx3wh Commentary by Jerry Bui, Senior Vice President of Digital Forensics, Purpose Legal

Forensic Readiness Matters More Than Containment

When autonomous AI agents "escape the sandbox," the real story isn't rogue machines — it's the same access-control failures we've seen for decades.

6,153

Dark Reading · Sep 25, 2026 · 4:17 PM UTC

SectopRAT Returns, Hiding Inside a Legitimate Application bit.ly/46LrAZL by Jai Vijayan

SectopRAT Returns, Hiding Inside a Legitimate Application

The remote access Trojan (RAT) shows why organizations should monitor the behavior of applications rather than blindly trusting them, experts say.

7,996

Dark Reading · Sep 25, 2026 · 4:12 PM UTC

'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing bit.ly/4dAia74 by Nate Nelson

'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing

Agentic AI can smuggle arbitrary instructions from the Web, across multiple apps, into trusted internal communications channels.

7,450

Dark Reading · Sep 24, 2026 · 4:13 PM UTC

Sep 24

3 Cyber Threats That Defined the Summer of 2026 darkreading.com/cyberattacks… #DRTheEdge

3 Cyber Threats That Defined the Summer of 2026

This Reporters' Notebook video discusses AI agents breaching Hugging Face, Fairlife's ransomware attack, and threat actors targeting a dozen water systems.

6,959

Dark Reading · Sep 24, 2026 · 4:13 PM UTC

Sep 24

Prompt-Injection Bug Hits $4B Agentic AI App 'Manus' bit.ly/4ACOZub by Nate Nelson

Prompt-Injection Bug Hits $4B Agentic AI App 'Manus'

AI apps that interpret external data (read: most AI apps) need exceptionally rigorous security filters, or attackers can take advantage.

8,033

Dark Reading · Sep 24, 2026 · 3:07 PM UTC

Sep 24

Ghost Service Accounts Enable M365 Data Theft in Chile bit.ly/4rO4Nq1 by Nate Nelson #DRGlobal

Ghost Service Accounts Enable M365 Data Theft in Chile

Even if employee accounts are locked down, forgotten and lost service accounts can undo an organization's entire M365 environment.

7,514

Dark Reading · Sep 23, 2026 · 10:14 PM UTC

EDR Evasion Stack Helps Process Injection Slip Past Defenses bit.ly/3VLZQ4M by Alexander Culafi

EDR Evasion Stack Helps Process Injection Slip Past Defenses

The process parameter poisoning EDR evasion technique bypasses security tools by hiding payloads in Windows process initialization structures.

9,906

Dark Reading · Sep 23, 2026 · 9:22 PM UTC

GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks bit.ly/4iFcFYd by Rob Wright

GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks

Incoming email addresses automatically assigned to each user on the platform contain highly privileged access tokens that attackers can use.

6,304

Dark Reading · Sep 23, 2026 · 5:10 PM UTC

UAE, Saudi Arabia Face Onslaught of Increasingly Complex Cyberattacks darkreading.com/threat-intel… by Robert Lemos #DRGlobal

UAE, KSA Face Spike in Increasingly Complex Cyberattacks

The United Arab Emirates and Saudi Arabia absorbed half of all cyberattacks recorded across the Gulf region in the first half of 2026.

7,622

Dark Reading · Sep 23, 2026 · 4:45 PM UTC

Attackers Manipulate AI Chatbots in Mass Disinformation, Phishing Campaign bit.ly/3Tkr4yM by Elizabeth Montalbano

Attackers Manipulate AI in Mass Disinformation, Phishing Campaign

Hackers are poisoning ChatGPT, Gemini, and Google AI Overview answers by seeding the Web with malicious links and data and then optimizing the content.

5,867

Dark Reading · Sep 23, 2026 · 4:35 PM UTC

Relays Are Masking Chinese Access to Frontier AI Models in the US bit.ly/4xzVueh by Jai Vijayan

Relays Are Masking Chinese Access to US Frontier AI Models

More than 80,000 AI relay servers are helping users in China mask their identities while they access cutting-edge LLMs, probably to clone them.

5,881

Dark Reading · Sep 23, 2026 · 4:27 PM UTC

Microsoft Disrupts EvilTokens Device Code Phishing Service bit.ly/4rAQyVm by Alexander Culafi

Microsoft Disrupts EvilTokens Device Code Phishing Service

Microsoft disrupted the EvilTokens phishing platform, which used AI-powered device code phishing to compromise thousands of organizations globally.

8,472

Dark Reading · Sep 23, 2026 · 2:38 PM UTC

Google, Microsoft, and xAI argue for a potential pause in AI deployment. Still, enterprises need the time too: Many businesses now have AI policies, best practices & a defined risk appetite, but "what they often lack is a way to enforce and verify those policies in practice." bit.ly/4yIMfJG

Amid Ongoing Rogue Incidents, Debate Over AI Safety Gets Real

As more reports of misalignment underscore AI risks, both large AI labs and regular businesses are searching for better way to keep control and be secure.

3,617

Dark Reading · Sep 23, 2026 · 2:21 PM UTC

Paying a ransom doesn't necessarily mean stolen data disappears. The ShinyHunters-Cl0p feud is a stark example of why: Once data is outside of an organization's control, it can potentially be stolen again, resold, exposed, or used for another round of extortion. Alex Culafi's latest for Dark Reading looks at what Cl0p's alleged breach could mean for the organizations it previously victimized. bit.ly/4hlkf83

ShinyHunters Hacked Clop. Now What About Clop's Victims?

ShinyHunters breached rival ransomware gang Clop's leak site, threatening to expose victim payment data and raising concerns about secondary data exposure.

4,117

Dark Reading · Sep 22, 2026 · 6:30 PM UTC

Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data bit.ly/4hF67b4 by Elizabeth Montalbano

Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data

Cyber-threat actors stole 170 private repositories using an OAuth token stolen from a former employee through the TanStack npm supply chain attack.

6,286

Dark Reading · Sep 22, 2026 · 6:20 PM UTC

Amid Ongoing Rogue Incidents, Debate Over AI Safety Gets Real bit.ly/4yIMfJG by Robert Lemos

Amid Ongoing Rogue Incidents, Debate Over AI Safety Gets Real

As more reports of misalignment underscore AI risks, both large AI labs and regular businesses are searching for better way to keep control and be secure.

7,332

Dark Reading · Sep 22, 2026 · 6:10 PM UTC

How AI Agents Can Trigger Runaway Costs for Enterprises bit.ly/4AshEC2 by Jai Vijayan

How AI Agents Can Trigger Runaway Costs for Enterprises

Unbounded consumption is an issue that OWASP currently ranks sixth in its Top 10 for LLM Applications, and it could be an extremely costly one.

5,202

Dark Reading · Sep 22, 2026 · 5:57 PM UTC

ShinyHunters Hacked Cl0p. Now What About Cl0p's Victims? bit.ly/4hlkf83 by Alexander Culafi

ShinyHunters Hacked Clop. Now What About Clop's Victims?

ShinyHunters breached rival ransomware gang Clop's leak site, threatening to expose victim payment data and raising concerns about secondary data exposure.