A newly discovered, critical zero-day vulnerability is under attack; a Qilin ransomware affiliate has been blamed for at ...

The financially motivated group is combining vishing, IT impersonation, and in-person office intrusions to steal data and ...

The United States and Iran have extended what began as a two-week ceasefire. The pause applies only to kinetic warfare, and even that didn't fully stop the shooting. The cyber front has no signs of a ...

Dark Reading launched, we're looking ahead. Spoiler: It's hyper-segmented, AI-orchestrated & more sophisticated than your dad ...

Organizations are growing serious about what nation’s rules apply to their data. Experts point to geopolitical tensions as a ...

High-autonomy agents with broad permissions and unfettered access are a recipe for disaster, but securing them is a daunting ...

A prompt injection flaw in Google Gemini's voice assistant let attackers hide malicious commands in notifications, enabling ...

From solely targeting Microsoft 365, the phishing-as-a-service platform now targets AWS, Okta, and Russian platforms.

A sneaky IAB operation uses a malicious traffic distribution system (TDS) to redirect visitors of trusted websites to ones ...

A disabled security setting meant to protect authentication across Android versions of key apps paved the way for attackers ...

Zoom's CISO, Sandra McLeod, discusses securing a communication platform, AI-driven security workflows, and advice for ...

China is stealing data from high-value targets via a sneaky, double-layer spear-phishing campaign that includes the Azureveil ...