darkreading

Securing the no-code supply chain isn't just about mitigating risks — it's about enabling the business to innovate with confidence.

Instead of constantly fixing security vulnerabilities, organizations should proactively build secure foundations that enable businesses to move faster while reducing risk.

In a new wrinkle on the tech support scam front, these search parameter injection attacks dupe victims into believing they are receiving technical help when they are actually speaking to fraudsters.

An unnamed customer of Paragon's Graphite product used the commercial spyware to target at least two prominent European journalists in recent months.

As Iran closes its cyberspace to the outside world, hacktivists are picking sides, while attacks against Israel surge and spread across the region.

OpenAI intends to help streamline the Defense Department's administrative processes using artificial intelligence.

Many cybersecurity professionals still don't feel comfortable admitting when they need a break. Yet their pressures continue to expand and involve, often leading to burnout and organizational risks.

The Android malware is targeting Turkish financial institutions, completely taking over legitimate banking and crypto apps by creating an isolated virtualized environment on a device.

Concerned by rapidly evolving evasion tactics, the new Jitter-Trap tool from Varonis aims to help organizations detect beacons that help attackers establish communication inside a victim network.

Security teams are no longer just the last line of defense — they are the foundation for responsible AI adoption.

An unidentified threat actor is using .lnk Windows shortcut files in a series of sophisticated attacks utilizing in-memory code execution and living-off-the-land cyberattack strategies.

The company acknowledged that cybercriminals had taken sensitive information on more than 8 million users, including names, phone numbers, car registration numbers, addresses, and emails.

Since at least January, the threat actor has been employing multiple malware tools to steal information for potential future attacks against Taiwanese businesses and government agencies.

While ushering in "great operational value" for organizations, private 5G networks add yet another layer to CISOs' responsibilities.

Cybercrime response needs more aggressive actions from those seeking to protect victims and pursue criminals.

Sound suggestions on how to tackle four "quiet problems" that often slip through the security cracks.

A vulnerability in the popular Python-based tool for building AI agents and workflows is under active exploitation, allowing for full system compromise, DDoS attacks, and potential loss or theft of sensitive data

Though its operations are running smoothly, the airline warned customers and employees to exercise caution when sharing personal information online.

Unlike typical data-stealing malware, this attack tool targets data specific to corporate and cloud infrastructures in order to execute supply chain attacks.

When security becomes a performance, the fallout isn't just technical. It's organizational.