"Workflow identity hijacking" can bypass standard security controls and hijack data using a basic request through an unauthenticated entry point.

Attackers are actively exploiting two of the vulnerabilities and another 58 are more likely to be exploited, according to ...

Threat actors are abusing multiple Google services to evade detection, ultimately harvesting credentials or installing ...

Researchers and OpenAI disagree on whether the earlier incident involving DseWiki was a “hack” that the company did not ...

Two separate attacks demonstrate how threat actors are finding new ways to compromise organizations by using the popular ...

A Chinese-language group is compromising government and education sites to create a reverse-proxy network with gambling-themed sites.

Omdia's Theresa Lanowitz talks with the Dark Reading News Desk about the potential — and risks — of using agentic AI for ...

James Kettle of PortSwigger talks with the Dark Reading News Desk about his AI-powered open source tool, which found new HTTP ...

Rich Mogull, chief analyst with the Cloud Security Alliance, joins the Dark Reading News Desk with what defenders need to take away from AI agents escaping their environments to launch attacks.

Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading ...

Frontier AI models have already conducted autonomous end-to-end compromises, but the situation will become more urgent very soon.

The Vulnpocalypse is a reckoning for software vendors as AI accelerates bug discovery, overwhelming remediation capacity and ...