Aggregated from vendor advisories, security research, and industry publications.
As part of its 20th anniversary celebration, Dark Reading looks back on 20 of the biggest newsmaking events from the past two decades that influenced the risk landscape for today's cybersecurity teams.
Gavril Sandu, 53, was indicted in 2017, but was arrested and extradited to the United States only in 2026. The post Romanian Man Extradited to US for Role in Hacking Scheme 17 Year…
Remote ID system will log aircraft identity and location as ministers try to stop rogue flyers grounding airports
Microsoft winds down console AI assistant as new boss says it no longer fits the plan
Investigators spent weeks unravelling enthusiast's bedroom project
It's in Waterfox too, and there it does what you'd expect
Enterprise companies looking to build or upgrade their data center switches, or even get technical support, best be prepared to wait in line behind AI-first providers that are chew…
Analysts recently confirmed what identity security teams have quietly feared: AI agents are being deployed faster than enterprises can govern them. In their inaugural Market Guide …
A new rowhammer attack gives complete control of NVIDIA CPUs. On Thursday, two research teams, working independently of each other, demonstrated attacks against two cards from Nvid…
In hard-to-detect attacks, hackers are dropping the CloudZ RAT and a fresh plug-in, Pheno, to hijack the Windows-based bridge between PCs and smartphones.
Agency issued guidance and calls on operators to build resilient OT environments capable of surviving extended isolation and cyber compromise. The post CISA Launches ‘CI Fortify’ t…
Seven official flavors offer alternatives to the default Wayland-only desktop – and Xfce looks like the leanest
The persistent, evasive implant provides remote access, surveillance, and credential exfiltration capabilities. The post Sophisticated Quasar Linux RAT Targets Software Developers …
Palo Alto Networks warned customers today that a critical-severity unpatched vulnerability in the PAN-OS User-ID Authentication Portal is being exploited in attacks. [...]
MoD eyes Middle East exports after desert trials of Cambridge Aerospace system
Google has announced expanded Binary Transparency for Android as a way to safeguard the ecosystem from supply chain attacks. "This new public ledger ensures the Google apps on your…
Cybersecurity researchers have disclosed details of an intrusion that involved the use of a CloudZ remote access tool (RAT) and a previous undocumented plugin dubbed Pheno with the…
While trojanized Daemon Tools versions were installed worldwide, a sophisticated backdoor was dropped only on a dozen systems. The post Government, Scientific Entities Hit via Daem…
EXCLUSIVE: Searches go missing, house sales fall through, and a 5G mast erected by mistake
Containing fixes for critical-severity vulnerabilities, the monthly rollouts will focus on addressing priority issues faster. The post Oracle Debuts Monthly Critical Security Patch…
Palo Alto Networks has released an advisory warning that a critical buffer overflow vulnerability in its PAN-OS software has been exploited in the wild. The vulnerability, tracked …
As the war with Iran continues, breach attempts targeting the United Arab Emirates tripled in a few weeks — many targeting critical infrastructure.
Vendor benchmark finds APIs let you do the job faster and cheaper Amazon Web Services has let AI agents loose in its cloudy WorkSpaces virtual PCs.…
Vendor benchmark finds APIs let you do the job faster and cheaper
CVE-2026-0300 affects the Captive Portal service of PAN-OS software on PA and VM series firewalls. The post Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls appeare…
Securities regulator urges market players to develop new strategies and nail cyber-basics before AI models fuel mass attacks India’s Securities and Exchange Board has advised parti…
Securities regulator urges market players to develop new strategies and nail cyber-basics before AI models fuel mass attacks
Backed by private equity and banking giants, it will build custom AI systems for business bottlenecks There’s gold in midmarket IT spend, and Anthropic - backed by private equity a…
Backed by private equity and banking giants, it will build custom AI systems for business bottlenecks
A previously undocumented Linux implant named Quasar Linux (QLNX) is targeting developers' systems with a mix of rootkit, backdoor, and credential-stealing capabilities. [...]