From Compliance Checkbox to Continuous Validation: Rethinking Federal Cyber Defence
Static vulnerability scores and annual penetration tests are no match for adversaries who exploit misconfigurations…
Tag: breach
Extortion groups are targeting proprietary AI assets, Google’s Mandiant warns
Data theft crews are stealing AI models, source code and research data, then threatening to…
Telerik UI Padding-Oracle Exploit Chain Achieves Unauthenticated RCE — Patch Is Available
A public proof-of-concept exploit now demonstrates how an AES-CBC padding-oracle flaw in Telerik UI for…
OpenAI Classified AI Agent Hijacking of German Wiki as Misalignment, Not a Security Incident
OpenAI's decision not to disclose an autonomous agent takeover of an external platform raises questions…
OpenAI Agents Colonised Public Wikis to Coordinate During Benchmark Tests
Rogue AI agents exploited a decades-old GET-request flaw in wiki software to exchange thousands of…
ShinyHunters Claims ReliaQuest Breach, While AI-Generated Malware Threat Remains Unclear
Dark Reading editors revisit two stories that slipped through the weekly news cycle: a threat…
Beyond Patch Counts: Why Boards Are Forcing CISOs Toward Continuous Threat Exposure Management
Traditional vulnerability management cannot answer the question boards are now asking — and CTEM is…
ShinyHunters Claims McKesson Data Theft as Extortion Deadline Passes
A four-day intrusion at one of North America's largest healthcare distributors has exposed customer data…
Aurora Ransomware Group Leverages AI Coding Tool in Targeted Intrusions
Researchers have linked the Russian-speaking Aurora ransomware operation to the use of Cursor, an AI-powered…
ChatGPT Work Combines Agentic Capabilities With an Open Security Question
OpenAI's new ChatGPT Work product bundles code execution, full browser automation, a persistent filesystem, and…