Cybersecurity
AWS AgentCore security undone by prompt requesting credentials
Tokens transmitted in metadata, weak VM isolation, and expansive permissions make hacking a lot easier
Cybersecurity
Latest news
Cybersecurity
Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories.
Cybersecurity
It looks like you’re buying a Clippy desk accessory without getting caught in a Microsoft crypto scam. Would you like help?
It looks like you’re buying a Clippy desk accessory without getting caught in a crypto scam. Would you like help? Oh yes, Microsoft’s iconic mascot is back.
Cybersecurity
As Roblox scams surge, our security expert recommends NordPass for protection — with up to 58% off our top password manager
With Roblox scammers once again in the news, we asked our security pro what’s the best way to protect email, social, and gaming accounts.
Cybersecurity
Feds Say Ransomware Expert’s Miracle Cure Was Just Paying the Hackers
An indictment says Zohar Pinhasi’s MonsterCloud billed ransomware victims millions for a decryptor it did not have, then paid the attackers a fraction of that fee.
Cybersecurity
FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack
The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X. ShinyHunters is the extortion group that said in September it had breached the FBI’s jobs portal and stolen sensitive data on almost all FBI agents and job applicants.
Cybersecurity
What We Missed: FBI Strikes Back at ShinyHunters
In this video conversation, Dark Reading editors discuss some of the news they didn’t get a chance to cover, from the arrest of a suspected ShinyHunters operative to the compromise of a Pentagon-run data center.
Cybersecurity
Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto
Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners.
Cybersecurity
FBI arrests another suspected ShinyHunters hacker after agency breach
The FBI has arrested another suspected member of the ShinyHunters extortion group believed to be involved in the recent breach of FBI systems, Director Kash Patel announced Friday.
Cybersecurity
iPhone kullanıcıları için yeni casus yazılım uyarısı: DarkSword’un farklı bir sürümü keşfedildi
iPhone’ları hedef alan P7 DarkSword casus yazılımı ortaya çıktı. Yeni sürüm, zararlı reklamlarla yayılıyor; parolaları, fotoğrafları ve notları hedef alıyor.
Cybersecurity
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword.
Cybersecurity
Security Threats Don’t Stop at the Office: Why Executives’ Families Need Training Too
Those closest to executives must match their security postures because the weakest link in a family becomes the entry point for attacks.
Cybersecurity
Germany arrests alleged core Qilin ransomware member after extradition
Germany has arrested a Russian national suspected of being a leading member of the Qilin ransomware group following extradition from Japan earlier this month.
Cybersecurity
‘Smart’ coffee makers are the perfect example why there’s a privacy revolt happening
Should we be thinking more critically about letting devices get connected?
Cybersecurity
Enerji devinin sistemlerine şifresiz erişim sağlayan açık bulundu
Sungrow’un iSolarCloud platformunda parolayı olmadan kullanıcı hesaplarına erişilmesine imkan tanıyan kritik bir güvenlik açığı bulundu. Şirket, açığı kısa sürede kapattı.
Cybersecurity
Surveillance company Flock cuts staff as privacy backlash grows
Flock would not say if CEO Garrett Langley would take a pay cut following the reduction in workforce.
Cybersecurity
Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access
Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that gives attackers root access before anyone approves the connection.
Cybersecurity
Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects
Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI). “It’s an opt-in service informed by our experience using Claude to find vulnerabilities during Project Glasswing,” Anthropic said.
Cybersecurity
Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge
Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners.
Cybersecurity
Max severity SonicWall SMA1000 flaw now exploited in attacks
Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago.
Cybersecurity
Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon.
Cybersecurity
In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years
Noteworthy stories that might have slipped under the radar: Tensorlake npm SDK compromised, Empire Market co-founder gets 40 years, exposed NVIDIA GPU monitors leak telemetry.
Cybersecurity
Citrix gives NetScaler admins another critical reason to patch
No word on exploitation status, but a 9.5 severity score suggests time is of the essence
Cybersecurity
The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition
As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era.
Latest digest
Week 41
EN
Popular stories
Sources
72 active sources
27 Turkish · 45 English
All sources
