News & Map

Trump administration orders Kalshi to scrap AI price tracker over national security concerns

The futures market for computer power lets buyers and sellers lock in prices, and gives traders a way to bet on where th...

Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists

Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware tha...

AI agents collude to bypass guardrails, a new study shows

Enterprise AI lab, Emergence AI, ran eight simulations testing how frontier models handle cybersecurity threats.

BambooToken Malware Uses MQTT to Control Windows and Linux Systems

Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry T...

Most Fraudulent Hires Receive Credentials Before Detection

A new report highlights the vast growth in fraudulent candidates, presenting significant insider threat challenges to or...

Most Firms Unable to Recover Quickly from Ransomware

Fenix24 found only four of more than 800 clients came close to stated ransomware recovery targets of 24-48 hours

Black Axe Members Extradited to US Over Internet Fraud Claims

Alleged Black Axe leaders extradited to the US over romance scams, BEC and money laundering claims

Have it both ways: stay discoverable in search while disallowing AI training

Cloudflare is giving site owners a way to stay discoverable while disallowing AI training. New controls and an Accountab...

Give every teammate and agent the right level of access to your Workers

You can now scope access to individual Workers and assign narrower Developer Platform roles, so teammates, CI tokens, an...

AI the Top Priority for New Spend as Cyber Budgets Flatline

IANS finds AI is dominating net-new budgets even as overall funding for the function is flat

25 Years of Mass Surveillance Is Enough

This essay was written with Cindy Cohn, and originally appeared in Lawfare. One of the many legacies of the terrorist at...

Political and business leaders back AI

US President Donald Trump called Nvidia CEO Jensen Huang during a live panel discussion to argue that worries about AI’s...

On the NSA’s Supercomputer from the 1960s

Really interesting story about Harvest, a specialized code breaking computer built in the 1960s by IBM for the NSA.

Not the Destroyer of Worlds: Why Compute is Humanity’s Most Vital Defense

Eighty years ago, the architects of our first dual-use revolution whispered that they had “become Death, the destroyer o...

AI plays sophisticated defense in a broken Washington

The industry is evolving how it applies the big lessons it learned from the social media techlash.

Microsoft Releases Emergency Patch to Fix RDS Vulnerability

Microsoft has been forced to issue an out-of-band fix for several issues stemming from this month’s Patch Tuesday

The New Chinese Way of Cyberwar

How Beijing will weaponize digital chokepoints.

'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink

The notorious Russian threat group is spreading an upgraded version of the botnet malware, which the FBI disrupted in 20...

Maximum Severity GitLab Flaw Puts Supply Chains at Risk

CVE-2026-85706 is a path traversal vulnerability with a 10 out of 10 CVSS score, affecting both GitLab Community Edition...

Malicious Twitch Extension Exposes 31,000 Users' OAuth Tokens

Socket has discovered a Twitch browser extension forwarding users' OAuth tokens to a Russian bot service

Human Attacker Hits Machine-Speed Exploitation of Marimo RCE

A human attacker exploited a Marimo RCE and reached an SSH bastion in eight seconds

Defense Cyber Spending Set to Surge Amid Rising Attacks on Military Systems

MarketsandMarkets has projected the cyber warfare market to double by 2031, amid growing demand for defensive and offens...

Revolut Confirms Data Breach Through Fake Government Requests

An unauthorized party used a legitimate government email domain to fraudulently request Revolut customer data

Microsoft’s Patching

Once a month, Microsoft pushes a security update to all Windows users. Tomorrow’s is a new record: Microsoft’s patch for...

Hackers Exploit Maximum Severity Flaw in GitLab

CISA warns that threat actors are exploiting a vulnerability with a CVSS score of 10.0

OpenAI Agent Swarm Hacks RubyGems Package Manager

Researchers confirm that OpenAI agents uploaded hundreds of malicious packages to RubyGems

Updated guidance on detecting and mitigating Active Directory compromises

Learn how malicious actors target Microsoft Active Directory environments, why they are critical to secure and how to re...

Learning from Ukraine’s unrivaled experience of Russian cyber warfare

No country in the world today knows more about Russian cyber warfare than Ukraine, but further steps are required in ord...

Russia is weaponizing US-built AI to make killer drones, cyberattack bots, and fake news

AI companies are sounding alarms, but the Trump administration isn’t acting on them.

‘Digital employees’ are coming to the Defense Logistics Agency

Nearly 200 agentic-AI bots are already running autonomously as the combat support agency pushes ahead with AI-powered to...

Threat Actor Generates 1M Personalized Fraud Emails in 3 Days

Cybercriminals behind malicious email campaigns no longer have to compromise volume for credibility, or vice versa, than...

CISA Calls for More Guidance, Less Spin, as Cyber Outages Escalate

A new joint government advisory signals a regulatory shift, pressing organizations to adopt more transparent breach noti...

SpiderSilk Hunts External Threats With AI-Based Scanner

The Dubai-based threat detection startup uses artificial intelligence tools to scan billions of IP addresses to find exp...

Why AI Is So Good at Scamming Humans

Fred Heiding of Menlo Park Intelligence talks with the Dark Reading News Desk about his research on frontier models, and...

Papercut AI Swarm Attack Heralds Changes for Cyber Kill Chain

From creating lab environments for staging and testing agentic attacks to reconnaissance to lateral movement and exfiltr...

Hackers Favor US Eastern Business Hours in M365 Phishing Campaign

KnowBe4 researchers observed a new phishing campaign leveraging Microsoft 365’s Direct Send to send malicious emails

Introducing automatic remediation policies with Cloudflare CASB

Cloudflare CASB policies introduce a native automation engine built directly on the Cloudflare developer platform to rem...

GitLab urges users to patch max severity path traversal flaw

GitLab urged users on Thursday to patch their servers immediately against a maximum-severity path traversal vulnerabilit...

Former AT&T worker accused of SIM-swap scheme targeting $600,000 from victims

Jabaroot: Behind the hacker group's claim of a 70,000‑name leak in Morocco's police and intelligence

Jabaroot: Behind the hacker group's claim of a 70,000‑name leak in Morocco's police and intelligence Submitted by Hugo M...