A newly discovered, critical zero-day vulnerability is under attack; a Qilin ransomware affiliate has been blamed for at ...

The financially motivated group is combining vishing, IT impersonation, and in-person office intrusions to steal data and ...

At least two Russia-aligned threat clusters have exploited a high-severity WinRAR flaw that has been patched for nearly a year in email-based attacks against military and government organizations in ...

The United States and Iran have extended what began as a two-week ceasefire. The pause applies only to kinetic warfare, and ...

Threat actors have struck the software supply chain yet again, this time hitting the Python Package Index (PyPI) with Mini Shai-Hulud in an attempt to spread poisoned code. In the latest campaign, ...

From solely targeting Microsoft 365, the phishing-as-a-service platform now targets AWS, Okta, and Russian platforms.

A prompt injection flaw in Google Gemini's voice assistant let attackers hide malicious commands in notifications, enabling ...

A disabled security setting meant to protect authentication across Android versions of key apps paved the way for attackers ...

Dark Reading launched, we're looking ahead. Spoiler: It's hyper-segmented, AI-orchestrated & more sophisticated than your dad ...

Zoom's CISO, Sandra McLeod, discusses securing a communication platform, AI-driven security workflows, and advice for ...

A sneaky IAB operation uses a malicious traffic distribution system (TDS) to redirect visitors of trusted websites to ones ...

Python scripts were used to test malware against endpoint detection and response agents from Sophos, CrowdStrike, and Windows ...