Explore the latest news, analysis, and updates about Cybersecurity.
A Dark Reading virtual event will address building a robust security strategy for artificial intelligence in the enterprise, highlighting growing concerns over emerging attack vectors and the need for dedicated AI protection frameworks beyond traditional cybersecurity practices.
A forthcoming virtual event will address essential strategies for protecting assets in enterprise cloud environments, highlighting the critical intersection with artificial intelligence and the security implications this technology introduces into cloud infrastructure.
Local public administrations, often constrained by limited budgets, face increasing exposure to cyberattacks. Mitigating this risk necessitates the intervention and technical support of external cybersecurity professionals, given the inadequacy of internal resources to establish robust defenses.
Ruby on Rails has patched critical vulnerability CVE-2026-66066 in its Active Storage component, with a CVSS score of 9.5. This flaw allowed unauthenticated attackers to read arbitrary files and escalate to potential remote code execution (RCE) in Rails applications, impacting image processing.
A reported attack targeting Coldcard hardware wallet users has potentially led to the loss of 389 Bitcoin. Alex Thorn of Galaxy Research indicated that the unconfirmed nature of these transactions might offer a window for affected users to attempt fund recovery.
CareCloud, a New Jersey-based health technology company, has confirmed a security breach that exposed medical and financial data of 345,000 individuals. The compromised information was hosted on its AWS systems.
CISA has issued a critical alert to public utilities, urging the removal of Internet-exposed Programmable Logic Controllers (PLCs) and enhanced Operational Technology (OT) security following coordinated cyberattacks on over 30 Minnesota water systems in late July.
Michael Coates, the new CISO of Solana Foundation, has warned that artificial intelligence (AI) is significantly increasing the sophistication of cryptocurrency scams. He anticipates that AI-related vulnerabilities and the creation of fake identities will drive the next phase of blockchain security challenges.
A critical vulnerability, dubbed HollowByte, allows unauthenticated attackers to induce a Denial-of-Service (DoS) condition in OpenSSL servers using a mere 11-byte payload. This attack can freeze up to 131 KB of memory per request on glibc-based systems, persisting until the affected process is restarted. OpenSSL implemented a fix in June 2026 without a CVE, public advisory, or changelog entry, creating significant challenges for security management and critical patch identification.
Microsoft has released a record-breaking security update, patching 622 vulnerabilities, including two zero-days actively being exploited. This number signifies a substantial increase from previous months, highlighting continuous pressure on the corporation's security posture and the urgent need for patch application.
Forg365 has emerged as an advanced Phishing-as-a-Service (PhaaS) platform, specifically designed to steal Microsoft 365 credentials. It leverages techniques like Adversary-in-the-Middle (AiTM) and Device Code Phishing, augmented by artificial intelligence (AI) for lure generation, enabling it to bypass multi-factor authentication (MFA) and enhance attack effectiveness.
The Cybersecurity and Infrastructure Security Agency (CISA) has issued urgent directives to U.S. federal agencies to patch two actively exploited vulnerabilities: one in the Langflow AI agent development framework and another of maximum severity in the Adobe ColdFusion platform. Both require immediate mitigation, with a deadline set for Friday, highlighting the exposure to significant risks in critical AI infrastructures and government web applications.
