Attention: You are using an outdated browser, device or you do not have the latest version of JavaScript downloaded and so this website may not work as expected. Please download the latest software or switch device to avoid further issues.
A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potential exploitation of CVE-2026-194… More...
A spear-phishing campaign by a China-nexus group linked to FamousSparrow provides insight into geopolitical, technical, and strategic global moves by … More...
The popular "Passportal" password manager, favored by MSPs and SMBs, remains risky even after its patch, thanks to its cloud-based design. Should thes… More...
Dark Reading Confidential Episode 20: Expert Rich Mogull reflects on lessons cyber teams should pull from the OpenAI agent's attack on Hugging Face. More...
New research shows how attackers can use security alerts and blocked events to manipulate and hijack AI agents. More...
A study of more than 6,000 patches found that even working patches can introduce new bugs, break something else, or are open to bypass. More...
Advanced LLMs escaped their sandboxes while attempting to achieve a non-malicious benchmark test objective. More...
A myriad of software makes up the typical AI harness, and trust issues between the components can create concerning attack vectors. More...
Ernst & Young has begun notifying clients of a data breach after an attacker compromised a third-party support platform and downloaded documents conta… More...
A cryptomining incident highlights how AI gateways can provide access to AI models, cloud infrastructure, and identity and access management (IAM) dat… More...
Microsoft signed a malicious kernel driver, and now it's being used to kill security software in ransomware attacks. More...
Two new models from Chinese firms compete with top US mainstream and frontier models. Should cyber-defenders be worried? More...
An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt other systems. More...
Does life feel Orwellian sometimes? One researcher has a solution for you: graphic tees that confuse the neural networks in surveillance cameras. More...
Threat actors can easily steal one-time passwords sent by text when they conduct a SIM swap attack. This can lead to account takeovers, so users must … More...
A leaked GitHub token underscores what most organizations get wrong: Treating secrets management as a tooling problem rather than an identity problem. More...
In addition to executing entirely in memory, the malware's infection chain incorporates other anti-analysis techniques designed to evade detection. More...
The disgruntled researcher released yet another PoC for a Windows Defender bug that allows for system takeover, showing no signs of abandoning their o… More...
“Ghost-Sender" is the result of a widespread misconfiguration, according to researchers, and evidence indicates it's being actively abused in the wild… More...
AI worms, or "viruses with wings and brains," adapt to new environments, seek out vulnerabilities, and will likely strike within a year, researchers s… More...
Python scripts were used to test malware against endpoint detection and response agents from Sophos, CrowdStrike, and Windows Defender. More...
