Dark Reading

Dark Reading
Name	Dark Reading
Type	Online magazine
Format	Digital
Owner	Risk Based Security (as of 2020 changes)
Founded	2006
Headquarters	United States
Language	English

Dark Reading Dark Reading is a cybersecurity-focused online publication covering information security, computer security, cybercrime, and network security subjects. It provides news, analysis, opinion, technical deep dives, and research summaries aimed at professionals in information technology and cybersecurity roles. The site is widely cited by practitioners, vendors, and policy actors for reporting on vulnerabilities, incident response, and threat actor activity.

Overview

Dark Reading publishes breaking news, technical articles, and investigative pieces addressing incidents such as breaches tied to groups like Lazarus Group, APT28, and FIN7, as well as vulnerability disclosures involving products from Microsoft, Adobe Systems, Cisco Systems, and Apple Inc.. Coverage spans standards and regulatory topics involving bodies such as the National Institute of Standards and Technology, European Union Agency for Cybersecurity, and laws like the Cybersecurity Information Sharing Act of 2015. The outlet profiles research from institutions including MIT, Carnegie Mellon University, Stanford University, and vendors such as CrowdStrike, FireEye, and Palo Alto Networks.

History

Founded in 2006 by practitioners and journalists with backgrounds tied to firms and publications around RSA Conference, SC Magazine, and InfoWorld, the site emerged during a period marked by incidents like the TJX Companies data breach and the rise of hacktivist operations associated with Anonymous (hacker group). Over time, editorial leadership and ownership shifted alongside consolidation trends seen at companies such as Informa plc and IDG Communications, while the community and events expanded to mirror ecosystem gatherings like Black Hat USA, DEF CON, and SANS Institute courses.

Content and Coverage

Articles frequently analyze exploit techniques such as SQL injection and zero-day chains reported against platforms like Microsoft Windows, Linux kernel, and Android (operating system). Reporting synthesizes whitepapers from labs including Kaspersky Lab, Symantec (Broadcom), ESET, and independent researchers associated with conferences like USENIX Security Symposium and ACM SIGCOMM. Features dissect incident response narratives referencing organizations such as Target Corporation, Equifax, Yahoo!, and Sony Pictures Entertainment (2014 attack), and follow legal proceedings involving entities like Department of Justice (United States), European Commission, and courts handling cases tied to cybercrime.

Audience and Impact

The readership comprises security practitioners, CISOs, incident responders, auditors, and executives at firms ranging from startups in Silicon Valley to enterprises like Amazon (company), Walmart, and Bank of America. Dark Reading’s analyses have influenced guidance issued by agencies such as US-CERT and standards bodies including ISO/IEC JTC 1, while thought leadership pieces have informed vendor product roadmaps at companies like Splunk, IBM Security, and McAfee. Coverage of major breaches has prompted Congressional hearings, as seen in proceedings featuring witnesses from Equifax and testimony before committees chaired by members of the United States House of Representatives.

Events and Conferences

The brand has been associated with and promoted sessions at security industry gatherings such as RSA Conference, Black Hat USA, DEF CON, Gartner Security & Risk Management Summit, and regional events run by groups like OWASP and ISACA. It produces webinars and panels featuring speakers from Google, Microsoft, NSA, Cisco Systems, and research labs at University of Cambridge and University of Oxford, often aligning content with threat intelligence updates issued after incidents like campaigns attributed to APT29.

Editorial and Business Model

Editorially, the publication combines staff journalism, guest columns from practitioners at firms such as CrowdStrike, FireEye, and Palo Alto Networks, sponsored content, and vendor advertisements tied to product categories like SIEM and endpoint detection from suppliers including Splunk, SentinelOne, and Trend Micro. Revenue streams mirror industry norms: advertising, sponsorships for research and events, and paid webinars. The outlet aggregates primary research from labs including Mandiant and Cisco Talos while hosting opinion pieces penned by CISOs from organizations like Capital One and Target Corporation.

Criticism and Controversies

Critics have challenged the publication over perceived vendor influence when sponsored content or vendor briefings coincide with coverage of incidents involving those vendors, raising comparisons to debates seen in trade coverage of Bloomberg L.P. and The Wall Street Journal. Concerns have been raised about balancing technical rigor with speed, echoing criticisms leveled at outlets such as Wired (magazine) and The New York Times in their technology reporting. Specific disputes have involved attribution claims and reliance on vendor-supplied telemetry in stories about groups like APT28 and Lazarus Group, prompting discussion among academic researchers at institutions including Oxford University and industry labs such as KrebsOnSecurity contributors.

Category:Cybersecurity publications