New research shows how security scanners embedded in the software supply chain can be attacked to serve as a foothold for ...

The flaw in the AI hosting platform Ruflo allows an unauthenticated attacker to take over and corrupt memory, so bad behavior ...

Lots of Internet-exposed server management controllers are subject to offline password-cracking attacks — and adversaries ...

Dormant non-human identities can create security blind spots. NHI Hound, an open source tool, can sniff out trust paths.

Researchers released a proof-of-concept (PoC) exploit for a now-patched flaw in Microsoft's Active Directory Certificate Services (AD CS) that can allow a low-privileged domain user to impersonate a ...

Attackers used Hermes, an autonomous open source tool, in unrestricted "YOLO mode" to conduct espionage against Thailand's ...

This category of vulnerabilities allows an attacker to easily acquire administrative level permissions and bypass cloud ...

Frontier AI models are accelerating vulnerability discovery and exploit weaponization faster than many enterprises can ...

Recently, Robert Lemos reported in Dark Reading that confidence in autonomous penetration testing is falling: The share of organizations willing to rely on it dropped to 9% in 2026, down from 29% a ...

An FBI agent explains how the law enforcement's Operation Cronos was successful in disrupting the largest ransomware group of ...

The AI security layer and guardrails on top of many AI products don't evenly protect against jailbreaking and unsafe actions ...

The surge in device-code phishing attacks highlights how threat actors are increasingly stealing passwords to target authentication sessions, tokens, and trust relationships that enable them to ...