EXCLUSIVE There's no honor among thieves as a new worm steals from other infectious software. It pilfers “multiple” victims’ ...

Developed with leading global financial institutions and backed by a growing partner ecosystem, the new Lightwell offerings help enterprises mitigate open source risk without disruptive ...

A new Android malware operation called RedWing is being rented out on Telegram as a ready-made bank-fraud service. It lets even low-skill criminals take over a victim's phone, steal their banking ...

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...

Google has released A2UI v0.9, a framework-agnostic standard for AI agents to declare user interface intent across multiple ...

A recent report from cloud security firm Sysdig details the capabilities of JadePuffer, which it says is the first ransomware ...

AssuranceAmerica says hackers accessed the driver’s license data of 6.9 million customers, exposing personal information and raising concerns about identity theft. If you can only read one tech story ...

A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code phishing, and multi-factor authentication (MFA) abuse to steal data from ...

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading ...

Q&A: Temporal aims to be the reliability backbone for an agentic AI economy Temporal Co-founder and CEO Samar Abbas weighs in on AI reliability, execution and what IT decision-makers should to keep in ...