Ransomware attacks have been a thorn in the side of organizations worldwide, and a new report from Sophos sheds light on a disturbing trend: identity compromise has become the primary root cause of ransomware attacks. Gone are the days when vulnerability exploitation was the top culprit; malicious email and phishing have taken center stage. According … Read more
Cybersecurity researchers have uncovered a blind spot in Secure Boot, a security feature designed to prevent malware from launching at startup. For years, nearly a dozen vulnerable but still trusted UEFI shim bootloaders remained on systems, allowing attackers to bypass Secure Boot protections and execute malicious code at boot time. The discovery was made by … Read more
Zoom has issued a critical security warning to millions of users worldwide, revealing that its desktop client and software development kit for Windows are vulnerable to account takeover attacks. The flaw, tracked as CVE-2026-53412, has been assigned a severity score of 9.8 out of 10, indicating it’s one of the most serious vulnerabilities Zoom has … Read more
Dutch Police Crack Major Investment Fraud Ring, Arrest Suspects and Seize Millions In a major blow to international cybercrime, Dutch authorities have arrested multiple individuals suspected of being part of an elaborate investment fraud scheme that’s estimated to have swindled tens of thousands of victims out of over €100 million. The massive operation involved 20 … Read more
Europe’s Cyber Defenders Get a Boost with Region-Specific Intelligence A new era of cybersecurity reporting has dawned on Europe, as Dark Reading launches its latest section, DR Global Europe, tailored specifically to the continent’s unique challenges and nuances. This move comes at a critical time for European cyber defenders, who are battling an unprecedented convergence … Read more
Ransomware has long been a major concern for businesses and individuals alike, but recent data suggests that identity attacks have become the dominant root cause of these devastating cyber incidents. According to Sophos’ State of Ransomware 2026 report, malicious email and phishing attacks have surpassed vulnerability exploitation as the top reasons behind ransomware attacks. A … Read more
A Russian-speaking threat actor has been using Google’s open-source Gemini CLI AI tool as a hacking agent to deploy and operate a small-scale botnet, compromising eight systems in a dental clinic and gaining access to the OpenDental database. What’s striking about this incident is the level of cooperation between the attacker and the AI tool, … Read more
Zoom Issues Critical Warning for Account Takeover Vulnerability Affecting Millions of Users Worldwide A critical vulnerability has been discovered in Zoom’s desktop client and software development kit for Windows, which could be exploited by an unauthenticated party to hijack user accounts. The security issue, tracked as CVE-2026-53412, affects millions of users who rely on the … Read more
A new iteration of the TuxBot malware, dubbed TuxBot v3 Evolution, has been discovered, showcasing an alarming trend towards leveraging Large Language Models (LLMs) for developing IoT botnets. This sophisticated threat not only highlights the evolving cyber threats landscape but also underscores the importance of bolstering IoT security measures. TuxBot v3 Evolution is a refined … Read more
Europe’s Cyber Defenders Get a Boost with New Region-Specific Intelligence In a bid to provide cybersecurity professionals across Europe and the UK with tailored intelligence and insights, Dark Reading has launched its latest section: DR Global Europe. This new initiative aims to fill a critical gap in threat intelligence by offering region-specific analysis that speaks … Read more