Dark Reading✓

Tim Wilson, co-founder and former editor-in-chief of Dark Reading, passed away five years ago in November. As Dark Reading enters its third decade, we pause to celebrate and honor Wilson's instrumental role in building and elevating the media site. Read the full story here: #DarkReading20 @InformaTTGT

Claude Model Builds Exploits Across Major Browsers & OSes by Jai Vijayan

Attackers aren't just targeting executives anymore — they're going after their families and friends to find a backdoor into the organization. Remind executives that the people closest to them need to be just as cyber-secure as they are. A video by Arielle Waldman. #CybersecurityAwarenessMonth. #CyberMonth

Threat Modeling With 4 Simple Questions on a White Board by Becky Bracken

Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes by Rob Wright

Cyber Vulnerabilities Besiege Italy, Absent Clear Cause by Nate Nelson #DRGlobal

GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub by Alexander Culafi

Attacker Relentlessly Scans for Credentials by Impersonating AI Bots by Elizabeth Montalbano

Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature by Robert Lemos #DRGlobal

3 Frameworks to Protect CISOs & Orgs Against AI Liability by Becky Bracken

External Teams Chats Anchor 15-Minute Malware Delivery by Alexander Culafi #CybersecurityAwarenessMonth. #CyberMonth

SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack by Jai Vijayan

Organizations often focus their security efforts on protecting executives, but threat actors have found a another vulnerable entry point: their families, who are increasingly targeted for social engineering, account takeovers, and password-guessing clues. Check out what Dark Reading's Arielle Waldman has to say on the matter here.

Beware the Slasher: AI Could Kill Off Cybersecurity Pros' Skills by Elizabeth Montalbano

'Aokigahara' Stealer Targets 'Developer Keyrings' & AI Assistants by Elizabeth Montalbano

Risks & Rewards: How AI Is Redefining the CISO's Role: by Jai Vijayan

In-the-Wild Attack Abuses AI Agents' Trust in Markdown: by Alexander Culafi

'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets By Elizabeth Montalbano

10 Software Security Practices Built for the Next 250 Years Commentary by Christopher Walcutt, Chief Security Officer, DirectDefense #CybersecurityAwarenessMonth. #CyberMonth

Threat actors manipulate search rankings and sponsored results to push fake software downloads, phishing sites, and credential theft campaigns in front of users who think they’re clicking a trusted source. In today's video, Dark Reading's Alexander Culafi breaks down what SEO poisoning is and the warning flags users easily miss. #CybersecurityAwarenessMonth #CyberSecurity #InfoSec #ThreatIntelligence #CyberAwareness #CyberMonth

As AI-powered phishing, advanced social engineering & cloud concentration risks reshape the threat landscape, cyber insurers are taking a more active role in cybersecurity itself. Stronger underwriting requirements, continuous risk monitoring & insurer-provided security services are becoming standard as carriers look beyond risk transfer and toward prevention. Read why underwriting alone may no longer be enough. #CyberInsurance #CyberRisk #Cybersecurity #RiskManagement