News & Map

Not the Destroyer of Worlds: Why Compute is Humanity’s Most Vital Defense

Eighty years ago, the architects of our first dual-use revolution whispered that they had “become Death, the destroyer o...

AI plays sophisticated defense in a broken Washington

The industry is evolving how it applies the big lessons it learned from the social media techlash.

Microsoft Releases Emergency Patch to Fix RDS Vulnerability

Microsoft has been forced to issue an out-of-band fix for several issues stemming from this month’s Patch Tuesday

The New Chinese Way of Cyberwar

How Beijing will weaponize digital chokepoints.

'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink

The notorious Russian threat group is spreading an upgraded version of the botnet malware, which the FBI disrupted in 20...

Maximum Severity GitLab Flaw Puts Supply Chains at Risk

CVE-2026-85706 is a path traversal vulnerability with a 10 out of 10 CVSS score, affecting both GitLab Community Edition...

Malicious Twitch Extension Exposes 31,000 Users' OAuth Tokens

Socket has discovered a Twitch browser extension forwarding users' OAuth tokens to a Russian bot service

Human Attacker Hits Machine-Speed Exploitation of Marimo RCE

A human attacker exploited a Marimo RCE and reached an SSH bastion in eight seconds

Defense Cyber Spending Set to Surge Amid Rising Attacks on Military Systems

MarketsandMarkets has projected the cyber warfare market to double by 2031, amid growing demand for defensive and offens...

Revolut Confirms Data Breach Through Fake Government Requests

An unauthorized party used a legitimate government email domain to fraudulently request Revolut customer data

Microsoft’s Patching

Once a month, Microsoft pushes a security update to all Windows users. Tomorrow’s is a new record: Microsoft’s patch for...

Hackers Exploit Maximum Severity Flaw in GitLab

CISA warns that threat actors are exploiting a vulnerability with a CVSS score of 10.0

OpenAI Agent Swarm Hacks RubyGems Package Manager

Researchers confirm that OpenAI agents uploaded hundreds of malicious packages to RubyGems

Updated guidance on detecting and mitigating Active Directory compromises

Learn how malicious actors target Microsoft Active Directory environments, why they are critical to secure and how to re...

Learning from Ukraine’s unrivaled experience of Russian cyber warfare

No country in the world today knows more about Russian cyber warfare than Ukraine, but further steps are required in ord...

Russia is weaponizing US-built AI to make killer drones, cyberattack bots, and fake news

AI companies are sounding alarms, but the Trump administration isn’t acting on them.

‘Digital employees’ are coming to the Defense Logistics Agency

Nearly 200 agentic-AI bots are already running autonomously as the combat support agency pushes ahead with AI-powered to...

Threat Actor Generates 1M Personalized Fraud Emails in 3 Days

Cybercriminals behind malicious email campaigns no longer have to compromise volume for credibility, or vice versa, than...

CISA Calls for More Guidance, Less Spin, as Cyber Outages Escalate

A new joint government advisory signals a regulatory shift, pressing organizations to adopt more transparent breach noti...

SpiderSilk Hunts External Threats With AI-Based Scanner

The Dubai-based threat detection startup uses artificial intelligence tools to scan billions of IP addresses to find exp...

Why AI Is So Good at Scamming Humans

Fred Heiding of Menlo Park Intelligence talks with the Dark Reading News Desk about his research on frontier models, and...

Papercut AI Swarm Attack Heralds Changes for Cyber Kill Chain

From creating lab environments for staging and testing agentic attacks to reconnaissance to lateral movement and exfiltr...

Hackers Favor US Eastern Business Hours in M365 Phishing Campaign

KnowBe4 researchers observed a new phishing campaign leveraging Microsoft 365’s Direct Send to send malicious emails

Introducing automatic remediation policies with Cloudflare CASB

Cloudflare CASB policies introduce a native automation engine built directly on the Cloudflare developer platform to rem...

GitLab urges users to patch max severity path traversal flaw

GitLab urged users on Thursday to patch their servers immediately against a maximum-severity path traversal vulnerabilit...

Former AT&T worker accused of SIM-swap scheme targeting $600,000 from victims

Jabaroot: Behind the hacker group's claim of a 70,000‑name leak in Morocco's police and intelligence

Jabaroot: Behind the hacker group's claim of a 70,000‑name leak in Morocco's police and intelligence Submitted by Hugo M...

Houthis used Anthropic AI to develop ballistic missile software, says report

Houthis used Anthropic AI to develop ballistic missile software, says report A Yemen-based threat actor cell has tried t...

Kenya: AI Plot to Divide Opposition Ahead of 2027 Exposed

[Capital FM] Nairobi -- An artificial intelligence-driven influence operation targeted former President Uhuru Kenyatta a...

Most Organizations Skip Permissions Reviews Before Deploying AI Tools

A new Syskit study has shown that only 43% of organizations with AI agents deployed in Microsoft 365 environments comple...

For China, a Mock A.I. Attack on WeChat Signals a Dangerous New Era

The demonstration of a potent cyberweapon has exposed China’s vulnerabilities and added to the urgency of A.I. safety ta...

Yemeni militants used Anthropic AI to try to build ballistic missiles

Missile test by group apparently failed, but exposes limits of AI safeguards

China, Iran among countries that have used AI to aid spying, Anthropic says

Anthropic said on Thursday it shut down multiple cases of state-sponsored surveillance operations that used its artifici...

Japan’s Digital Agency says personal information possibly leaked

No secondary damage, such as the misuse of the possibly leaked personal information, has been confirmed so far.

Anthropic blocks possible attempt to use AI to make biological weapons

The revelations in Anthropic's threat intelligence report come after a former top researcher at the company warned of th...

Anthropic blocks effort to use AI to research potential biological weapons

Anthropic says it has blocked efforts to use its artificial intelligence models to carry out cyber attacks and research ...

Anthropic warns of bids to use AI to build biological weapons

Experts urge stricter access to AI models as Anthropic reports rising misuse cases, including biological research risks.

Why AI experts are ‘freaked out’ over safety fears ahead of Xi-Trump summit

A flurry of cybersecurity breaches, internal whistle-blowing, and declining visibility into model safety has sparked fre...

Trezor: 347,000 users targeted in phishing attacks after Brevo breach

Trezor has revealed that phishing attacks against its customers earlier this week targeted 347,000 email addresses and a...

Anthropic foils AI surveillance targeting dissidents in China, Iran and West Africa

Anthropic said on Thursday it had disrupted several state-sponsored surveillance operations using its artificial intelli...