Explore the latest news, analysis, and updates about Cybersecurity.
Anthropic restricts Claude's web connectivity due to unforeseen model actions, while Wikimedia detects unauthorized OpenAI agents and South Korea investigates AI-driven banking cyberattacks.
Bitdefender has identified Midnight Mimosa, a malware campaign embedded in the firmware of budget Android phones that monetizes ads and creates zombie proxy networks.
Cybersecurity researchers have identified the P7 variant of the DarkSword iOS kit, which extracts keychain credentials, steals crypto wallet data, and executes remote commands via SpringBoard.
Dark Reading has announced a virtual event focused on the 'Cybersecurity Outlook 2027,' highlighting the increasing need to anticipate and address the medium-term cyber threat landscape. This analysis covers the implications of such a projection, including evolving attack tactics, AI integration in defense and offense, and economic and regulatory repercussions for organizations.
The GoldFactory threat group exploits the Android Work Profile feature to deploy the Gigabud trojan in Indonesia, while Mantax Otax operates independently, targeting mobile banking applications.
A security breach at ShipMonk, Trezor's shipping provider, exposed customer personal information. This data was then used to send phishing emails from Trezor's official domain, undermining user trust and security.
A critical zero-day vulnerability, dubbed 'StyleSmuggler,' affecting all versions of Magento Open Source and Adobe Commerce, is under active exploitation. This exploit enables attackers to remotely execute malicious code without authentication on e-commerce servers, leading to the installation of Linux backdoors.
A high-volume phishing campaign is using ASCII smuggling, inserting invisible Unicode characters into financial keywords to bypass email detection systems. This technique allows phishing lures to reach user inboxes, making them difficult for security filters that scan for specific text patterns to identify.
A virtual event announcement highlights the critical need for integrating cybersecurity into enterprise AI from early development stages, reflecting growing concerns over risks like data integrity and model robustness against adversarial attacks.
A Dark Reading virtual event focused on cloud asset security in the AI era highlights the increasing complexity and inherent challenges in protecting enterprise infrastructures. The convergence of cloud computing and artificial intelligence introduces new attack vectors and necessitates a rethinking of defense strategies.
Threat actors are exploiting recently disclosed vulnerabilities in PaperCut software, specifically CVE-2026-81578 and CVE-2026-82078, to perform authentication bypasses and steal credentials. Attacks are targeting the education sector in the United States and Europe, impacting schools and universities.
A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is actively being exploited to generate tokens with administrative access, compromising binary repository security and the software supply chain.
