Attackers have begun widely exploiting two critical vulnerabilities in WordPress that, when chained, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites.

Ivanti CSO Daniel Spicer says LLMs have shown surprising effectiveness in early stages; but cost and human-in-the-loop ...

Job pressures have increased as companies run headlong into AI adoption, causing 26% of top security executives to consider ...

Two newly reported vulnerabilities in SonicWall's Secure Mobile Access (SMA) appliances have been exploited as zero-days by a major ransomware group. On July 14, the cybersecurity vendor SonicWall ...

The White House's Gold Eagle has landed. After announcing the vulnerability coordination clearinghouse "Gold Eagle" on June 2, the White House launched the initiative on July 14. The collaboration ...

Having completed its $32 billion acquisition of Wiz earlier this year, Google is fulfilling its plan to automate threat detection, investigation, and remediation with a new "agentic defense" platform ...

Forget about attackers. Agentic artificial intelligence is creating enough risks for organizations and demands a security ...

Artificial intelligence and LLMs can be surprisingly ineffective against text salting, allowing phishing emails to slide right into your inbox.

Iberian hackers carried out a variety of cyberattacks and laundered the winnings through complex financial networks.

Explore the latest evolution of Dark Reading's DR Global section — your go-to source for region-specific cybersecurity ...

When combined with another exploit, the "PromptFiction" vulnerability, which has been fixed, could have enabled an end-to-end ...

A popular artificial intelligence (AI) coding tool can be exploited in just two clicks, allowing attackers to install permission-rich model context protocol (MCP) servers on privileged developers' ...