A spear-phishing campaign by a Chinese-nexus group linked to FamousSparrow provides insight into technical and strategic ...

The new AI company markets itself as having no limits, but it raises flags about how cybercriminals may already be taking ...

Rich Mogull of Cloud Security Alliance joins the Dark Reading News Desk with cyber defender takeaways on rogue AI agents ...

In a "near-autonomous" attack, a Chinese-language operator used a complex AI framework to target and compromise government ...

Explore the latest news and expert commentary on Threat Intelligence, brought to you by the editors of Dark Reading ...

One Caledonian government agency reported a breach, thanks to a third-party training contractor that may have serviced other ...

Former chief information officers explain the role of executive support, creative tactics, and organization-wide buy-in.

A study of more than 6,000 patches found that even working patches can introduce new bugs, break something else, or are open ...

Threat actors can trick a Copilot instance into giving up details about its own architecture, paving the way for a novel prompt injection attack. Varonis reported CoSnitch to Microsoft in December ...

The National Institute of Standards and Technology (NIST) is seeking guidance on the future of the National Vulnerability Database (NVD) and to what degree AI should be integrated into its management ...

A browser extension central to Belgium's national identity card system was built like Swiss cheese, letting hackers steal victims' identities and payment information, and even perform code execution ...

A critical vulnerability in VMware vCenter came under heavy exploitation via a single threat actor just days after public disclosure. CVE-2026–59310 is a critical directory traversal flaw with a 9.8 ...