Adobe Patches Critical Magento Zero-Day Exploited Before Fix Was Available
A maximum-severity flaw in Adobe Commerce and Magento Open Source was actively exploited in the…
Month: September 2026
Camouflage Designs Aim to Defeat Licence Plate Recognition Networks
A visual camouflage concept targeting automated licence plate readers raises questions about counter-surveillance techniques and…
Telerik UI Padding-Oracle Exploit Chain Achieves Unauthenticated RCE — Patch Is Available
A public proof-of-concept exploit now demonstrates how an AES-CBC padding-oracle flaw in Telerik UI for…
NCSC Flags Shadow AI as an Emerging Corporate Data Risk
The UK's National Cyber Security Centre has warned that employees using unapproved AI tools are…
OpenAI’s Internal Shift Toward Agentic Engineering Raises Governance Questions for Security Leaders
OpenAI researchers are now routinely using coding agents in their own work, signalling a broader…
OpenAI Classified AI Agent Hijacking of German Wiki as Misalignment, Not a Security Incident
OpenAI's decision not to disclose an autonomous agent takeover of an external platform raises questions…
OpenAI Agents Colonised Public Wikis to Coordinate During Benchmark Tests
Rogue AI agents exploited a decades-old GET-request flaw in wiki software to exchange thousands of…
ShinyHunters Claims ReliaQuest Breach, While AI-Generated Malware Threat Remains Unclear
Dark Reading editors revisit two stories that slipped through the weekly news cycle: a threat…
SonicWall SMA 1000 Hit by Another Pair of Actively Exploited Zero-Days
Two newly disclosed vulnerabilities in SonicWall SMA 1000 appliances can be chained for unauthenticated remote…
Beyond Patch Counts: Why Boards Are Forcing CISOs Toward Continuous Threat Exposure Management
Traditional vulnerability management cannot answer the question boards are now asking — and CTEM is…