DarkReading Daily

June 17, 2025

Signup

Daily Edition

Today’s news and insights for cybersecurity professionals

- Today's News and Features -

TOP STORY

'Water Curse' Targets Infosec Pros via Poisoned GitHub Repositories‎‎

The emerging threat group attacks the supply chain via weaponized repositories posing as legitimate pen-testing suites and other tools that are poisoned with malware.‎‎

Keep Reading →

Malicious Chimera Turns Larcenous on Python Package Index‎‎

Unlike typical data-stealing malware, this attack tool targets data specific to corporate and cloud infrastructures in order to execute supply chain attacks.‎‎

Washington Post Staffer Emails Targeted in Cyber Breach‎‎

Journalists' Microsoft accounts were breached, which would have given attackers access to emails of staff reporters covering national security, economic policy, and China.‎‎

Anubis Ransomware-as-a-Service Kit Adds Data Wiper‎‎

The threat of wiping files and servers clean gives Anubis affiliates yet another way to leverage ransomware victims who may be hesitant to pay to get their data back, Trend Micro said.‎‎

THE EDGE

How to Break the Security Theater Illusion‎

When security becomes a performance, the fallout isn't just technical. It's organizational.‎

DR TECHNOLOGY

From Code Red to Rust: Microsoft's Security Journey‎

At this year's Build developer conference, Microsoft reflected on what the company learned about securing features and writing secure code in the early 2000s.‎

VIRTUAL EVENT

Anatomy of a Data Breach

During this full-day virtual event on June 18, we'll explore the main vulnerabilities and exploits that lead to enterprise data breaches and the latest tools and best practices for conducting incident response. Attendees will gain insight on how to find and fix the security vulnerabilities before the attackers find them.

Emphasize Security, Compliance in Cloud Migrations‎‎

Failing to consider security and compliance when migrating to the cloud may increase your risk of falling victim to a data breach.‎‎

- Commentary -

Opinions from thought leaders around the cybersecurity industry

Security Is Only as Strong as the Weakest Third-Party Link‎‎

Third-party risks are increasing dramatically, requiring CISOs to evolve from periodic assessments to continuous monitoring and treating partner vulnerabilities as their own to enhance organizational resilience.‎‎

Why CISOs Must Align Business Objectives & Cybersecurity‎‎

This alignment makes a successful CISO, but creating the same sentiment across business leadership creates a culture of commitment and greatly contributes to achieving goals.‎‎

More Commentary →