The APT actor is using a new tactic, dubbed "RedFlick," against Ukrainian-linked targets to limit victim interaction and deploy its CosmicPulse backdoor.

As aviation suffers more cyberattacks, air traffic systems are the latest target, with a ransomware toolkit installed on at least one OT network.

A patched Unsloth Studio vulnerability allows malicious AI models to execute arbitrary Python code during inspection, via the trust_remote_code setting.

Attackers are exploiting CVE-2026-86950, an out-of-bounds write flaw, in an extremely sophisticated fashion, according to Apple.

The critical vulnerabilities, which impact default configurations of NetScaler products, essentially give attackers a skeleton key to customers' networks.

Microsoft observed a China-based actor using the modular malware in intrusions against telcos, universities, medical, and government organizations.

The Open Agent Safety Platform relies on both hardware and software components to monitor agent activities and quarantine unruly agents before they cause harm.

A high-severity zero-day vulnerability affects the TDengine time-series database used across industrial, IoT, energy, and automotive environments.

The Carbonato botnet compromises exposed Docker hosts, deploys an AI agent to steal AI API keys, and then spreads to other exposed Docker services.

A purported ad-blocker exfiltrates reams of sensitive information and benefits from having Google's stamp of approval despite researcher warnings.

The "agentic threat actor" may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.

In this video, Dark Reading editors discuss some of the news they didn't get a chance to cover, including Google Gemini models breaking containment.

Training human-resource managers in the latest tactics and warning signs helps blunt the threat, but automated analysis can help even more.

Building a financial bridge: Organizations where CISOs and CFOs align on cybersecurity strategy to protect assets, manage risk and enable business growth are better prepared to face today's threat landscape.

In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from Google Gemini models breaking containment to ShinyHunters ratting on TeamPCP hackers.

Training human-resource managers in the latest tactics and warning signs helps blunt the threat, but automated analysis can help even more.

A storm is raging in the form of cyber sabotage, disinformation, and drone attacks on European nations, particularly those that provide support to Ukraine.

Agentic AI can smuggle arbitrary instructions from the Web, across multiple apps, into trusted internal communications channels.

This Reporters' Notebook video discusses AI agents breaching Hugging Face, Fairlife's ransomware attack, and threat actors targeting a dozen water systems.

AI apps that interpret external data (read: most AI apps) need exceptionally rigorous security filters, or attackers can take advantage.

This installment of the Reporters' Notebook video series discusses the impact of AI agents breaching Hugging Face, Fairlife's ransomware attack, and Iranian-linked threat actors compromising a dozen US water systems. It was a busy summer.

Even if employee accounts are locked down, forgotten and lost service accounts can undo an organization's entire M365 environment.

Keeping edge computing safe requires organizations to fundamentally rethink security governance. Here is a path forward: a step-by-step guide to building a SASE framework.

Enterprise computing is moving to the edge. Keeping it secure requires tactics far beyond putting up firewalls.

The process parameter poisoning EDR evasion technique bypasses security tools by hiding payloads in Windows process initialization structures.

Incoming email addresses automatically assigned to each user on the platform contain highly privileged access tokens that attackers can use.

The United Arab Emirates and Saudi Arabia absorbed half of all cyberattacks recorded across the Gulf region in the first half of 2026.

Hackers are poisoning ChatGPT, Gemini, and Google AI Overview answers by seeding the Web with malicious links and data and then optimizing the content.

More than 80,000 AI relay servers are helping users in China mask their identities while they access cutting-edge LLMs, probably to clone them.

Microsoft disrupted the EvilTokens phishing platform, which used AI-powered device code phishing to compromise thousands of organizations globally.

As more reports of misalignment underscore AI risks, both large AI labs and regular businesses are searching for better way to keep control and be secure.

ShinyHunters breached rival ransomware gang Cl0p's leak site, threatening to expose victim payment data and raising concerns about secondary data exposure.

The Cybersecurity and Infrastructure Security Agency (CISA) is going old-school to help organizations with limited resources set traps for hackers.

Cybersecurity and brand reputation are inextricably linked, and organizations that establish regular touchpoints, develop joint crisis communications plans, and translate security risks into their brand impact will significantly outperform those treating security as merely an operational IT concern.

Cyber-threat actors stole 170 private repositories using an OAuth token stolen from a former employee through the TanStack npm supply chain attack.

As more reports of misalignment underscore AI risks, both large AI labs and regular businesses are searching for better way to keep control and be secure.

Unbounded consumption is an issue that OWASP currently ranks sixth in its Top 10 for LLM Applications, and it could be an extremely costly one.

ShinyHunters breached rival ransomware gang Cl0p's leak site, threatening to expose victim payment data and raising concerns about secondary data exposure.

The AI giant disclosed six examples of concerning model behavior and published a new framework for investigating and disclosing such incidents.

The authentication bypass flaw CVE-2026-76460 impacts Cisco's Identity Services Engine (ISE) and received a maximum 10 out of 10 CVSS score.

MFA is essential, but it cannot replace OAuth governance, least-privilege scopes, consent monitoring, and rapid revocation.

AI-driven cyberattacks used to be exotic. Soon, it'll be odd if threat actors aren't using agents to do all of their bidding.

The move is consistent with the agency's advice on the need for organizations to prioritize the vulnerabilities that actually matter.

Amid the US and China's fight for eco-colonial influence in Latin America, a stealthy backdoor has taken flight.

CISOs are not waiting for AI to prove its cybersecurity value before investing in the technology. Is it the right move?

Cybersecurity industry veteran Hal Pomeranz gives a pep talk on career anxiety and shares advice on building connections during tech industry downturns.

You can't make an omelet without breaking a few eggs, and you can't patch nearly 1,000 CVEs without a few glitches.

A North Korean APT group used a new Linux espionage toolkit to compromise load balancers, gain access to communications, and further exploit networks.

A new type of attack hijacks AI assistants built directly into a browser to access sensitive information, execute malicious actions, and exfiltrate data.

The full-service MaaS platform offers a Windows implant, command-and-control (C2) infrastructure, and an operator panel for comprehensive remote access.