Cybersecurity News

The Australian Federal Police (AFP) arrested two men from Western Australia, aged 21 and 23, in connection with TeamPCP, a prolific cybercrime and data extortion group blamed for t...

Black Hat USA 2026 wrapped up in Las Vegas with two themes dominating every hallway track and keynote: the rapidly maturing risk surface around agentic AI systems and growing uneas...

Manchester Airports Group (MAG), the public-private operator of Manchester, London Stansted, and East Midlands airports, confirmed Thursday that a cyberattack compromised personal ...

Next.js has patched two critical vulnerabilities that allow unauthenticated remote code execution. The first, CVE-2026-75604, has a CVSS score of 9.0 and exploits a path-traversal ...

An untold number of ZBT-manufactured routers, rebadged and resold worldwide as white-label networking products, have been found to ship with multiple undocumented backdoors hardcod...

OpenAI has disclosed that its own AI agents constructed an unauthorized communication channel inside Artifactory, the internal package-management service used to support training a...

Foreign intelligence services—particularly those operating out of China and Russia—are ramping up cyber operations against German companies, according to a new Bitkom survey of 1,0...

OpenAI disclosed that reward hacking was the primary catalyst behind an AI-powered breach of Hugging Face, revealing that misaligned agent behavior was first detected as early as l...

Australian authorities have arrested and charged two men suspected of being members of the notorious cybercrime group TeamPCP, which is blamed for hundreds of millions of dollars i...

President Donald Trump signed an executive order on Wednesday prohibiting the acquisition and installation of foreign-made bulk-power system electric equipment in the United States...

Nation-state hackers linked to Russian intelligence services have shifted their operational focus from traditional email-based phishing to encrypted messaging platforms, targeting ...

President Trump issued Executive Order 14420 on Wednesday, declaring a national emergency to address vulnerabilities in the United States' bulk power system stemming from foreign-s...

Finland's Helsinki Court of Appeal ruled unanimously on Thursday to revive the collapsed prosecution of three senior officers aboard the Eagle S, the Russia-linked oil tanker that ...

A phishing campaign targeting individuals and organizations in Cambodia is delivering the open-source Go-based remote access trojan Spark RAT through lures themed as government not...

James Kettle of PortSwigger talks with the Dark Reading News Desk about his AI-powered open source tool, which found new HTTP request-smuggling techniques....

The West African nation launched financing, procurement, and infrastructure policies to boost its sovereign cloud initiative and increase domestic technical knowledge....

Interpol's coordinated law enforcement operation, codenamed Jackal IV, has struck a significant blow against West African organized cybercrime networks, dismantling infrastructure ...

A new phishing-as-a-service offering dubbed "NovaCookies" is enabling low-skilled cybercriminals to conduct adversary-in-the-middle (AitM) attacks against Microsoft 365 users for a...

Security researchers have uncovered a sophisticated Android malware campaign in which operators of a long-running click-fraud botnet are now weaponizing the legitimate firmware ...

North Korean IT worker schemes have evolved significantly, with operatives now using sophisticated identity-laundering techniques to infiltrate companies across the US, Europe, and...

Dark Caracal, a threat actor long associated with widespread cyber espionage campaigns targeting journalists, activists, and government entities across the Middle East and Europ...

Meta has agreed to pay $17 billion and implement sweeping reforms to its youth safety practices, settling a landmark civil case brought by nearly every U.S. state and territory ove...

The CERT Coordination Center (CERT/CC) has disclosed two unpatched vulnerabilities in Kaltura's HTML5 video player library that allow remote, unauthenticated attackers to read arbi...

Medical device manufacturer Boston Scientific disclosed this week that a cybersecurity incident has disrupted portions of its global operations, including the systems responsible f...

OpenAI has disclosed that it banned a cluster of ChatGPT accounts operated from Russia that leveraged VPNs to circumvent geographic access restrictions and conduct a coordinated in...

Cybersecurity researchers at Island have disclosed a subscription-based adversary-in-the-middle (AitM) phishing toolkit called NovaCookies that abuses legitimate Docusign envelopes...

Palo Alto Networks' Unit 42 research team has published an analysis of 405 malware samples linked to artificial intelligence, revealing a stark gap between hype and operational rea...

The National Security Agency is set to welcome hundreds of former members of its elite Tailored Access Operations (TAO) unit back to its Fort Meade, Maryland headquarters on Fri...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has disclosed the results of two simultaneous red team assessments against critical infrastructure organizations, r...

The U.S. Department of Justice announced on Wednesday the disruption of two interconnected hacking platforms—QScan and QTRouter—operated by the Chinese state-sponsored threat group...