Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their ...

Hundreds of stores lost millions of dollars because they hired third parties to manage the outdated OT firmware running their ...

CVE-2026-104935, an authentication bypass + RCE vulnerability, was only partially patched in July, leaving an opening for ...

An underground marketplace, Yam Store, linked cloud infrastructure, phishing kits, and criminal services behind more than 1 ...

A bug in Claude Code Desktop's preview pane can allow adversaries to steal credentials from developers, undetected.

Organizations are reporting that employees face threats to their families, stalking, physical violence, and abduction, but ...

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading ...

The AI-enabled operation faked government documents and the created a local organization to target schools in Peru and ...

The Democratic People's Republic of Korea (DPRK) is trying to get insight into its war effort in Ukraine, through simple ...

As we progress further into the AI-driven "vulnpocalypse era," Microsoft’s October 2026 Patch Tuesday security update blows ...

Anthropic says AI worms may be months away, but its research stops short of demonstrating a practical self-replicating attack ...

Edward Dubrovsky, a longtime cybersecurity executive, was arrested and charged in Pennsylvania last week for conspiracy to ...