The NPM package for Axios, a popular JavaScript HTTP client library, was briefly compromised this week, possibly by North ...

As organizations disclose breaches tied to TeamPCP's supply chain attacks, ShinyHunters and Lapsus$ are creating a murky ...

As AI took center stage at the conference, experts talked automation, oversight, human intelligence in cybersecurity and the absence of the US government.

Even organizations with users unwilling or unable to adopt iOS 26 can now protect themselves from a severe mobile-OS cracking tool.

CrowdStrike Falcon now supports Microsoft Defender data for better threat detection and analytics in its Next-Gen SIEM ...

A study exclusively shared with Dark Reading details Latin America's unique labor pool, and why organizations should expand ...

App privacy labels help users but need better accuracy and tools to ensure data privacy and simplify choices for consumers ...

Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.

CVE-2025-53521 was first disclosed in October as a high-severity denial-of-service (DoS) flaw, but new information reveals ...

Operational technology at critical industrial sites seem to have been benefitting from a lull in ransomware, and hackers' ...

While the US government sits out, EU officials are on the ground in San Francisco leading the conversations on today's ...

Factory 2.0 deepens security with new AI tools, Actions, and Skills to continuously reconcile open-source artifacts across ...