Buffalo Cop Indicted Over Genesis Market Purchases
A Buffalo Police detective has been hit with a superseding federal indictment for allegedly attempting to purchase stolen credentials from an illicit online marketplace known…
Category: DarkReading
China-linked Silk Typhoon Hackers Target SaaS Providers
The China-linked advanced persistent threat (APT) group Silk Typhoon has shown a rare ability to compromise trusted relationships in the cloud. That’s one of the…
CISA Warns Of ICS Vulnerabilities In Siemens, Tigo, EG4
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) have released four new Industrial Control Systems (ICS) advisories. These advisories expose multiple vulnerabilities in widely used…
CISO Podcast Series Episode 2 Out Now
The Cyber Express, in collaboration with Suraksha Catalyst, is thrilled to announce the launch of Episode 2 of the Black Hat USA 2025 CISO Podcast…
Critical CVE-2025-9074 Docker Desktop Vulnerability Fix
A severe security vulnerability identified as CVE-2025-9074 has been discovered in Docker Desktop, exposing users to critical risks where malicious containers can gain unauthorized access…
Apple Patches Zero-Day In IOS 18.6.2 After Targeted Exploits
Apple on Wednesday released iPadOS/iOS 18.6.2, as a security update addressing a zero-day vulnerability— tracked as CVE-2025-43300. The company said, the bug has already been…
Russia’s FSB-Linked Hackers Targeting Cisco Network Gear
How often do you hear people talking about issues of legacy systems—especially in critical infrastructure environments? Here’s another example of how deeply rooted this issue…
DOM‑based Extension Clickjacking Threatens User Data
A newly discovered technique, dubbed DOM-based extension clickjacking, has raised serious concerns about the security of browser-based password managers. Despite their role in protecting sensitive…
Decoding The Chrome CVE‑2025‑9132 V8 Vulnerability
The Hong Kong Computer Emergency Response Team Coordination Center issued an alert regarding a remote code execution flaw in Google Chrome. The Chrome team reported…
Ethan Foltz Charged In Rapper Bot DDoS-for-Hire Case
A massive cybercrime operation tied to one of the internet’s most powerful DDoS-for-hire botnets, Rapper Bot, has been brought down, and at the center of…
Episode 1 Out Now | Black Hat USA 2025 CISO Series
The Cyber Express, in collaboration with Suraksha Catalyst, has kicked off the Black Hat USA 2025 CISO Series Podcast with a powerful first episode recorded…
New HTTP/2 DoS Vulnerability Prompts Vendor and Project Fixes
A new HTTP/2 denial of service (DoS) vulnerability that circumvents mitigations put in place after 2023’s “Rapid Reset” vulnerability is largely being addressed by affected…