Category: DarkReading

North Canton City Council To Adopt Cybersecurity Policy
27
Oct
2025

North Canton City Council To Adopt Cybersecurity Policy

The City Council of North Canton, Ohio, is preparing to adopt a new cybersecurity policy designed to strengthen digital defenses…

BIND 9 DNS Flaw Exposes 706K Servers
27
Oct
2025

BIND 9 DNS Flaw Exposes 706K Servers

A newly disclosed security flaw has put more than 706,000 BIND 9 DNS resolvers worldwide at risk of cache poisoning attacks, according…

Compromised YouTube Accounts Distribute Infostealer Malware
24
Oct
2025

Compromised YouTube Accounts Distribute Infostealer Malware

More than 3,000 malicious YouTube videos were used to distribute infostealer malware, according to a new report detailing the operation….

Drone, Malware, Drone Malware, North Korea, UAV, Operation DreamJob, Operation Dream Job
24
Oct
2025

North Korean Hackers Deploy “Drone” Malware In Targeting Of European UAV Manufacturers

The name said it all: DroneEXEHijackingLoader.dll. That internal file name, buried in malicious code delivered to three European defense contractors,…

Microsoft Fixes Critical WSUS RCE Flaw CVE-2025-59287
24
Oct
2025

Microsoft Fixes Critical WSUS RCE Flaw CVE-2025-59287

Microsoft has released an urgent out-of-band security update to address a severe remote code execution (RCE) vulnerability in Windows Server…

SessionReaper, Adobe, Magento, Vulnerabilities Exploitation, SessionReaper Exploitation
24
Oct
2025

SessionReaper Exploits Erupt As Magento Sites Lag On Patching

Six weeks after Adobe shipped an emergency fix, attackers have begun weaponizing SessionReaper — and most Magento stores still stand…

U.S. Alleges Security Company Official Stole Trade Secrets to Sell to Russian Buyer
23
Oct
2025

U.S. Accuses Security Firm Official Of Trade Secrets Theft

The U.S. government has apparently charged a former cybersecurity company official with stealing trade secrets with the intention of selling…

WazirX To Resume Trading After 15-Month Cyberattack Halt
23
Oct
2025

WazirX To Resume Trading After 15-Month Cyberattack Halt

WazirX, one of India’s popular cryptocurrency exchanges, is set to restart its operations on October 24, nearly 15 months after a cyberattack…

CVE‑2025‑62518 RCE Flaw In Async-tar
23
Oct
2025

CVE‑2025‑62518 RCE Flaw In Async-tar

A critical flaw has been identified in a Rust library that demands immediate attention from developers and IT decision-makers leveraging the Rust ecosystem. The…

Microsoft Digital Defense Report 2025: Cybercrime Trends
23
Oct
2025

Microsoft Digital Defense Report 2025: Cybercrime Trends

The newly released Microsoft Digital Defense Report 2025 reveals new data on global cyber threats. According to the report, more than…

Vidar Stealer 2.0 Boosts Infostealer's Theft And Evasion
22
Oct
2025

Vidar Stealer 2.0 Boosts Infostealer’s Theft And Evasion

Vidar Stealer 2.0 has been released, and the updated infostealer claims to offer improved performance with advanced credential stealing and…

AI Agent, AI Assistant, Prompy Injection
22
Oct
2025

How “Unseeable Prompt Injections” Threaten AI Agents

A new form of attack is targeting browsers with built-in AI assistants. Researchers at Brave have found that seemingly harmless…