An emerging threat group known as TA419 built seemingly legitimate professional relationships with AI policy experts working for US organizations.

AI-powered attacks are fast, relentless, and automated. How security teams can keep up is top of mind, according to the latest Dark Reading reader poll.

The offensive cyber operations startup looks to evolve red teaming beyond traditional methods to simulate attackers' increasingly advanced capabilities.

One company told customers to power down its platform, while the other remained mum on reported attacks prior to releasing a patch for its product.

Patch middleware vulnerabilities now to avoid hardware-based MFA exploits in ultra-sensitive environments.

LLMs are software systems requiring proper containment control, not sentient actors with malicious intent.

Organizations don't need better vulnerability scanners; they need to know who owns their assets.

Organizations may face an artificial intelligence (AI) reckoning over the next year. Omdia and Gartner weigh in on how to tackle the governance, security, and value challenges ahead.

A trio of newly discovered backdoors walk and quack like legitimate edge solutions, so it's hard to tell they're not.

Law enforcement from multiple countries collaborated to disrupt a cybercrime operation that has claimed some 500 victims worldwide in the past two years.

In yet another ClickFix-style campaign, threat actors abuse legitimate domains from OpenAI and Google to fool unsuspecting users.

A year-old Chinese threat actor looks like a cybercrime gang, acts like a state-associated APT, and attacks organizations in unexpected places.

The new White House Accord on so-called "Super Intelligence" calls on companies to implement greater controls and oversight over AI safety.

The APT actor is using a new tactic, dubbed "RedFlick," against Ukrainian-linked targets to limit victim interaction and deploy its CosmicPulse backdoor.

As aviation suffers more cyberattacks, air traffic systems are the latest target, with a ransomware toolkit installed on at least one OT network.

A patched Unsloth Studio vulnerability allows malicious AI models to execute arbitrary Python code during inspection, via the trust_remote_code setting.

Attackers are exploiting CVE-2026-86950, an out-of-bounds write flaw, in an extremely sophisticated fashion, according to Apple.

The critical vulnerabilities, which impact default configurations of NetScaler products, essentially give attackers a skeleton key to customers' networks.

Microsoft observed a China-based actor using the modular malware in intrusions against telcos, universities, medical, and government organizations.

The Open Agent Safety Platform relies on both hardware and software components to monitor agent activities and quarantine unruly agents before they cause harm.

A high-severity zero-day vulnerability affects the TDengine time-series database used across industrial, IoT, energy, and automotive environments.

The Carbonato botnet compromises exposed Docker hosts, deploys an AI agent to steal AI API keys, and then spreads to other exposed Docker services.

A purported ad-blocker exfiltrates reams of sensitive information and benefits from having Google's stamp of approval despite researcher warnings.

The "agentic threat actor" may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.

In this video, Dark Reading editors discuss some of the news they didn't get a chance to cover, including Google Gemini models breaking containment.

Training human-resource managers in the latest tactics and warning signs helps blunt the threat, but automated analysis can help even more.

Building a financial bridge: Organizations where CISOs and CFOs align on cybersecurity strategy to protect assets, manage risk and enable business growth are better prepared to face today's threat landscape.

In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from Google Gemini models breaking containment to ShinyHunters ratting on TeamPCP hackers.

Training human-resource managers in the latest tactics and warning signs helps blunt the threat, but automated analysis can help even more.

A storm is raging in the form of cyber sabotage, disinformation, and drone attacks on European nations, particularly those that provide support to Ukraine.

Agentic AI can smuggle arbitrary instructions from the Web, across multiple apps, into trusted internal communications channels.

This Reporters' Notebook video discusses AI agents breaching Hugging Face, Fairlife's ransomware attack, and threat actors targeting a dozen water systems.

AI apps that interpret external data (read: most AI apps) need exceptionally rigorous security filters, or attackers can take advantage.

This installment of the Reporters' Notebook video series discusses the impact of AI agents breaching Hugging Face, Fairlife's ransomware attack, and Iranian-linked threat actors compromising a dozen US water systems. It was a busy summer.

Even if employee accounts are locked down, forgotten and lost service accounts can undo an organization's entire M365 environment.

Keeping edge computing safe requires organizations to fundamentally rethink security governance. Here is a path forward: a step-by-step guide to building a SASE framework.

Enterprise computing is moving to the edge. Keeping it secure requires tactics far beyond putting up firewalls.

The process parameter poisoning EDR evasion technique bypasses security tools by hiding payloads in Windows process initialization structures.

Incoming email addresses automatically assigned to each user on the platform contain highly privileged access tokens that attackers can use.

The United Arab Emirates and Saudi Arabia absorbed half of all cyberattacks recorded across the Gulf region in the first half of 2026.

Hackers are poisoning ChatGPT, Gemini, and Google AI Overview answers by seeding the Web with malicious links and data and then optimizing the content.

More than 80,000 AI relay servers are helping users in China mask their identities while they access cutting-edge LLMs, probably to clone them.

Microsoft disrupted the EvilTokens phishing platform, which used AI-powered device code phishing to compromise thousands of organizations globally.

As more reports of misalignment underscore AI risks, both large AI labs and regular businesses are searching for better way to keep control and be secure.

ShinyHunters breached rival ransomware gang Cl0p's leak site, threatening to expose victim payment data and raising concerns about secondary data exposure.

The Cybersecurity and Infrastructure Security Agency (CISA) is going old-school to help organizations with limited resources set traps for hackers.

Cybersecurity and brand reputation are inextricably linked, and organizations that establish regular touchpoints, develop joint crisis communications plans, and translate security risks into their brand impact will significantly outperform those treating security as merely an operational IT concern.

Cyber-threat actors stole 170 private repositories using an OAuth token stolen from a former employee through the TanStack npm supply chain attack.

As more reports of misalignment underscore AI risks, both large AI labs and regular businesses are searching for better way to keep control and be secure.

Unbounded consumption is an issue that OWASP currently ranks sixth in its Top 10 for LLM Applications, and it could be an extremely costly one.