USA Fencing deployed an automated identity verification system to streamline membership processing for its growing athlete base. The automation reduce…

Iran-linked threat actors targeted over 30 community water systems across Minnesota, demonstrating accelerating cyber-risks to U.S. critical infrastru…

The ransomware industry is drunk on complexity. Every week brings a new variant, a fresh exploit chain, another blockchain-based extortion twist desig...

Every time CISA issues new guidance, the industry response is predictable: vendors panic, consultants celebrate, and everyone scrambles to "get compli...

Most coverage treats the explosion of adversarial testing tools as a productivity win: companies now have better ways to find vulnerabilities before a...

The cybersecurity industry has a perverse incentive problem, and it's baked into how we measure success. We're rewarding companies for managing risk *...

Most coverage of mobile security incidents treats them as isolated failures. A vulnerable SDK here, a compromised app store listing there, a misconfig...

A Chinese-linked threat actor deployed a weaponized DeepSeek AI agent targeting a security firm's infrastructure. Researchers discovered the malicious…

Chief Information Security Officers face mounting pressure from accountability mandates that arrive without corresponding authority or resources. CISO…

CISA released updated Software Bill of Materials (SBOM) guidance this week, introducing approximately two dozen modifications to existing field specif…

# Certificate and Key Inventory Becomes Essential After Root of Trust Compromise When a root certificate or private key enters the wild, the damage e…

Google Firebase configuration gaps in tl;dv, a popular AI meeting transcription and notetaking platform, exposed government and corporate video calls …

Device code phishing attacks surged 1,500% during 2026, according to threat intelligence tracking by Dark Reading. The spike reflects attackers' delib…

N-able's remote monitoring and management (RMM) platform faces a critical new exploitation vector that security teams missed during initial patching e…

# New Tool Traces AI Videos Back to Their Source A team of researchers has developed a forensic technique that identifies the source model behind art…

Anthropic released findings this week on last month's security incidents involving its Claude AI model, attributing the breaches to infrastructure mis…

DecryptAds, a new free service launched to combat digital tracking opacity, aggregates and simplifies advertising technology data that was previously …

# CSS: The Hidden Threat Lurking in Your Inbox Security researchers have identified a novel attack vector that exploits Cascading Style Sheets (CSS) …