Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.
Read at the sourceSecurity News
Live news from trusted publications, matched against DayBreach CVE data.
All sourcesArs Technica · 59BleepingComputer · 125CERT Polska · 74Cisco Talos · 44CrowdStrike · 32Dark Reading · 47DataBreaches.net · 17Krebs on Security · 11Microsoft Security Blog · 35Proofpoint · 31Rapid7 · 59SANS Internet Storm Center · 47Security.NL · 251SecurityWeek · 29SentinelOne · 24The Cyber Express · 55TheCyberThrone · 44The Hacker News · 239The Record · 16Unit 42 · 42
Prominent Ransomware Negotiator Faces Extortion Charges
Edward Dubrovsky, a longtime cybersecurity executive, was arrested and charged in Pennsylvania last week under conspiracy to extort money.
Read at the source
No Identity, No Recovery: Cyber Resilience Starts With IAM
The proliferation of enterprise apps and the centrality of cloud identity providers requires an identity security rethink.
Read at the source
Passing the Baton: Dark Reading Names New Editor-in-Chief
Fahmida Y Rashid will keep the momentum going as she leads Dark Reading.
Read at the source
ASOS Breach Reveals the Risks in Customer-Facing SaaS
The attack on the British retailer shows that compromising a single identity can lead to much deeper penetration of the corporate network.
Read at the source
AI Scramble Drives Cybersecurity M&A Boom
Welcome to another gangbuster year for strategic M&A activity in cyber, with 117 deals announced in the latest quarter. What's different: Many of the buyers are not your typical cybersecurity firms.
Read at the source
What We Missed: FBI Strikes Back at ShinyHunters
In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from the arrest of a suspected ShinyHunters operative to the compromise of a Pentagon-run data center.
Read at the source
Security Threats Don't Stop at the Office: Why Executives' Families Need Training, Too
Those closest to executives must match their security postures because the weakest link in a family can become the entry point for attacks.
Read at the source
Social Engineering AI Agents: The New BEC for 2026
As AI agents gain authority over business systems, attackers can manipulate them like business email compromise (BEC) victims.
Read at the source
'AgentCorruption' Puts AWS Environments at Risk With Single Prompt
A now-patched vulnerability in AWS Bedrock AgentCore could have allowed an attacker to use one AI chatbot to take over an organization's entire fleet.
Read at the source
1-10 / 44 news items shown