Dark Reading (2 hours ago)
Don’t buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
Read the full story on Dark Reading.
The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks, drawing record attendance and marking 22% growth.
Built from decades of threat intelligence research, the new resource explains scams from the victims’ perspective and tracks emerging forms of cyber crime.
A 1988 federal law could bar tech companies from using video viewing data for targeted ads without explicit user consent.
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud.
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel’s live cloud sandboxes, and Vercel confirmed it.
Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.
Hundreds of stores lost millions of dollars because they hired third parties to manage the outdated OT firmware running their cooling systems.
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
Hugging Face Blog
72 active sources
27 Turkish · 45 English
All sources
