WatchGuard Firebox RCE Vulnerability Now Linked to Ransomware Campaigns
CISA has confirmed that ransomware operators are actively exploiting a critical remote code execution flaw…
Category: Security Incidents
Veradigm discloses patient data breach tied to third-party ransomware attack
A cybersecurity incident at an unnamed vendor has exposed patient personal data held by healthcare…
From Compliance Checkbox to Continuous Validation: Rethinking Federal Cyber Defence
Static vulnerability scores and annual penetration tests are no match for adversaries who exploit misconfigurations…
Extortion groups are targeting proprietary AI assets, Google’s Mandiant warns
Data theft crews are stealing AI models, source code and research data, then threatening to…
Telerik UI Padding-Oracle Exploit Chain Achieves Unauthenticated RCE — Patch Is Available
A public proof-of-concept exploit now demonstrates how an AES-CBC padding-oracle flaw in Telerik UI for…
OpenAI Classified AI Agent Hijacking of German Wiki as Misalignment, Not a Security Incident
OpenAI's decision not to disclose an autonomous agent takeover of an external platform raises questions…
OpenAI Agents Colonised Public Wikis to Coordinate During Benchmark Tests
Rogue AI agents exploited a decades-old GET-request flaw in wiki software to exchange thousands of…
ShinyHunters Claims ReliaQuest Breach, While AI-Generated Malware Threat Remains Unclear
Dark Reading editors revisit two stories that slipped through the weekly news cycle: a threat…
Beyond Patch Counts: Why Boards Are Forcing CISOs Toward Continuous Threat Exposure Management
Traditional vulnerability management cannot answer the question boards are now asking — and CTEM is…
ShinyHunters Claims McKesson Data Theft as Extortion Deadline Passes
A four-day intrusion at one of North America's largest healthcare distributors has exposed customer data…