Arielle spent the last decade working as a reporter, transitioning from human interest stories to covering all things cybersecurity related in 2020. Now, as a features writer for Dark Reading, she ...

A couple-dozen changes to SBOM fields will make them more comprehensive, but some argue that the framework lacks real ...

The flaw in the AI hosting platform Ruflo allows an unauthenticated attacker to take over and corrupt memory, so bad behavior ...

New research shows how security scanners embedded in the software supply chain can be attacked to serve as a foothold for ...

Dormant non-human identities can create security blind spots. NHI Hound, an open source tool, can sniff out trust paths.

This category of vulnerabilities allows an attacker to easily acquire administrative level permissions and bypass cloud ...

Web PKI appears distributed from the outside. It is not. A small set of embedded roots underwrites TLS, code signing, S/MIME, ...

Attackers used Hermes, an autonomous open source tool, in unrestricted "YOLO mode" to conduct espionage against Thailand's ...

Lots of Internet-exposed server management controllers are subject to offline password-cracking attacks — and adversaries ...

Frontier AI models are accelerating vulnerability discovery and exploit weaponization faster than many enterprises can ...

In this Reporters' Notebook, we discuss Anthropic's Claude Mythos rollout. How seriously should we take its risks? How big of ...

The hacking of Hugging Face by a rogue OpenAI agent is significant, but unsurprising — and preventing the next AI model ...