28 May 2026 · 12:00 UTC

View CSAF Summary ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. A firmware update is available that resolves these privately reported vulnerabilities in the product versions…

28 May 2026 · 12:00 UTC

View CSAF Summary Successful exploitation of this vulnerability could result in an attacker gaining administrator access to the device. The following versions of Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485…

Yesterday · 12:00 UTC

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-0257 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability This type o…

Yesterday · 14:39 UTC

An unknown threat actor has been observed using a large language model (LLM) agent to conduct post-compromise actions after obtaining initial access following the exploitation of a publicly-accessible Marimo network usin…

Today · 06:41 UTC

Palo Alto Networks has warned that a recently disclosed medium-severity security flaw impacting PAN-OS and Prisma Access has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-0257 (CVSS s…

Yesterday · 18:07 UTC

Cybersecurity researchers have disclosed details of a vulnerability in OpenAI ChatGPT that leverages the artificial intelligence (AI) assistant's implicit trust in Markdown links and images to trigger prompt injections a…

Today · 14:16 UTC

A newly discovered local privilege escalation vulnerability dubbed 'CIFSwitch' in the Linux kernel could allow attackers to forge CIFS authentication key descriptions, abuse the kernel's key request mechanism, and gain r…

Yesterday · 18:21 UTC

Threat actors are abusing ChatGPT's content-sharing feature to display fake OpenAI outage pages that direct users to download malware disguised as the ChatGPT desktop application. [...]

Yesterday · 18:08 UTC

California Attorney General Rob Bonta filed a lawsuit against 23andMe, now Chrome Holding Co., over the company's failure to protect sensitive customer genetic and personal information. [...]

Yesterday · 13:00 UTC

Threat actors from the Silent Ransom Group, aka Luna Moth, are escalating attacks by impersonating IT staff in phone calls and even showing up in person to gain direct access to victim systems

Yesterday · 09:00 UTC

ESET’s 2026 APT Activity Report suggests China-backed APTs are using instability in the region to target victims, as well as continuing activity against organizations around the globe

Yesterday · 10:00 UTC

From a research-driven pilot, the Cybersecurity Communities of Support (CyCOS) is about to be handed over to CIISec

Yesterday · 16:07 UTC

A report from the Commerce Inspector General details how mismanagement allowed a backlog of 27,000 unprocessed security flaws to grow unchecked, while the agency duplicated work with a similar CISA program. The post Fede…

28 May 2026 · 18:54 UTC

It’s part of a series of examinations at the House Homeland Security Committee that now will include a public event. The post House panel poised to hold hearing centered on AI impact on cyber appeared first on CyberScoop…

Yesterday · 18:17 UTC

Zachary Sweeney allegedly traveled to New York, Indiana, Missouri and Georgia to meet and harm numerous victims in person. The FBI began investigating him in 2023. The post Tennessee man linked to 764 accused of series o…

28 May 2026 · 12:45 UTC

This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – May. 28, 2026 – Read the full story in Daily Mirror Hilmy Cader warns that the intensity and sophistication of cybercrime, now superc…

Yesterday · 12:40 UTC

This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – May. 28, 2026 – Listen to the podcast A 1997 WIRED story reported on Chris Lamprecht, the first person to be legally banned from usin…

28 May 2026 · 17:33 UTC

From AI Experiments to Autonomous Operations – Christophe Briguet, Sr. Director of Product Management – AI & Security Analytics, Stellar Cyber San Jose, Calif. – Apr. 28, 2026 Something shifted in early 2026. Not gradual…

18 May 2026

Cloudflare shares findings from testing Mythos and other security-focused LLMs against live code across critical infrastructure, including model strengths, weaknesses, and what is needed before this work can scale.

Yesterday · 13:00 UTC

Researchers discover an exploit chain combining over-permissioned roles, secrets discovery, and non-human identities that could have compromised a popular automation service.

Yesterday · 20:22 UTC

As part of Dark Reading's 20th anniversary package, we asked readers for a cybersecurity-related caption that captures their thoughts about the industry's last two decades.

Yesterday · 14:35 UTC

The cyber insurance industry has made relatively weak inroads into Asia due to a a variety of factors, but that could be changing.

Yesterday · 21:05 UTC

Someone named “Squid” seems to be a “West Country legend.” As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.

Yesterday · 11:02 UTC

Younger Americans have soured on the second Donald Trump presidency, but they are not protesting it. Despite an unpopular Iran war and an even more unpopular Trump administration, college campus protests nationwide have…

27 May 2026 · 14:02 UTC

The 2025 Internet Crime Report was published a few weeks ago, but I only just saw it. Lots of interesting statistics. Press release. News articles.

Yesterday · 02:00 UTC

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

28 May 2026 · 19:41 UTC

Using the data collected over the past year and using Kibana these two ES|QL query to summarize the data, this shows the list of the most uploaded threat to two DShield sensors (local and cloud) over the past year. I hav…

28 May 2026 · 02:00 UTC

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Today · 11:00 UTC

A new book looks into the long history of people who have opposed vaccines.

Today · 10:00 UTC

Trump admin wants to rely on states for coal ash monitoring, enforcement, allow them to bypass national standards.

Yesterday · 22:58 UTC

Peer review now optional, political staff would screen grants for forbidden topics.

Today · 13:00 UTC

Experts say AI firm’s engagement with Vatican risks creating ‘feelgood’ discourse that lacks critical examinationWhy did Anthropic’s founder sit beside the pope during a warning about AI?In the first major written teachi…

28 May 2026 · 19:56 UTC

Claude’s parent company’s $65bn in latest funding round underscores vast sums of money still flowing into industryAnthropic, the AI firm behind the Claude chatbot, announced on Thursday it had raised $65bn in funding to…

Yesterday · 10:55 UTC

Speaking at Amazon’s AI on the Lot event, the Rogue One film-maker Gareth Edwards said ‘it’ll do anything you ask’ and ‘it’s going to be better than CGI’Jurassic World Rebirth and Rogue One director Gareth Edwards has en…

28 May 2026 · 20:45 UTC

Exposed genetic and other personal information.

28 May 2026 · 06:39 UTC

Lock down fundamentals ahead of expected "vulnerability storm".

28 May 2026 · 20:37 UTC

Plugs "significant" resourcing into the program of work.

28 May 2026 · 21:29 UTC

Fine-tuning tests show "bias... toward confidently representing the claims as true."

Yesterday · 16:16 UTC

The latest twist in paying humans to wear head cameras for robot training data.

28 May 2026 · 20:29 UTC

Undisclosed addition in jqwik instructed AI coding agents to delete app output.

28 May 2026 · 14:55 UTC

Google Pay is overhauling its payment infrastructure for an impending wave of transactions from AI agents. The latest updates introduce the Universal Commerce Protocol and a new server architecture, positioning Google Pa…

Yesterday · 16:24 UTC

OpenAI’s latest governance frameworks offer enterprise leaders a structured blueprint for scaling safe and compliant AI deployments globally. The adoption of large language models has steadily progressed towards requirin…

Yesterday · 10:44 UTC

Anthropic has released Claude Opus 4.8, an upgrade to Claude Opus 4.7 that the company says brings improved results for coding, agent work, reasoning, and knowledge work. The platform can be used through claude.ai, Claud…

Yesterday · 22:14 UTC

While AI is helping coders produce code faster, it may not be producing better code, researchers warn. And that could cause problems down the road for them.

Today · 13:00 UTC

We’ve compiled an overview of some of the top alternative browsers available today aiming to challenge Chrome and Safari.

Yesterday · 18:49 UTC

The rise of AI has brought an avalanche of new terms and slang. Here is a glossary with definitions of some of the most important words and phrases you might encounter.

28 May 2026 · 13:00 UTC

Robotics is entering a new phase: moving from controlled demos and scripted automation toward generalizable, reliable embodied autonomy in the real world. At the International Conference on Robotics and Automation (ICRA)…

28 May 2026 · 13:00 UTC

License to stream, shaken and stirred. GeForce NOW is dialing up the espionage with the launch of 007 First Light, letting members slip into James Bond’s reimagined origin story from almost any device — no tux or preload…

27 May 2026 · 16:00 UTC

AI factories are token factories, converting power into intelligence in real time. And as agentic AI scales and autonomous, always-on special agents are deployed in the enterprise, performance per watt and cost per token…

Yesterday · 10:00 UTC

Pope Leo XIV’s new encyclical on artificial intelligence includes a statement that warrants serious attention from technologists and policymakers: “Technology is never neutral.” Magnifica Humanitas (“Magnificent Humanity…

28 May 2026 · 09:51 UTC

It is one thing to say AI will change the world. It is another to expect the class of 2026 to applaud it. In fact, when former Google CEO Eric Schmidt told University of Arizona graduates that their task is to help shape…

Today · 14:02 UTC

You may have heard that Valve's new Steam Controller can ring like a telephone or do the Wilhelm scream. But did you know it can sing songs, too? Let me show you. Here's the new Steam Controller performing the "Ground Th…

Today · 14:00 UTC

I live in a part of Los Angeles where I feel safer bringing pepper spray on walks. The problem is, I don't always remember to bring it with me, and it's not legal to carry it everywhere I go. Pebblebee's $59.99 Halo Blue…

Today · 14:00 UTC

As handheld consoles continue to grow and push the limits of what you can actually hold in your hands, the Arduboy FX-C comes in a refreshingly pocketable package. It manages to squeeze the best features of past models a…

Today · 09:30 UTC

I tested Wispr Flow and various AI-powered transcription software to see whether you should bother subscribing or stick with free services.

Yesterday · 20:56 UTC

Loryn Brantz created The Good Advice Cupcake for BuzzFeed years ago. The company licensed the character for a new Amazon series—made with AI—without her consent.

Yesterday · 19:07 UTC

Google’s new AI agent combed through my emails, documents, and calendar to plan a birthday party and still didn’t clock the person most important to me.

Yesterday · 21:37 UTC

"We've seen this movie before" is a phrase that sums up the way many people feel about the Whyalla steelworks' financial predicament but the community is hopeful of a promising new sequel.

Yesterday · 21:08 UTC

Booking.com is being sued in Europe, and consumer advocates think Aussie travellers might also have a claim.

Yesterday · 19:30 UTC

Alpine business owners and resort managers say they are not overly concerned about a warmer winter forecast, with preparations underway for the 2026 ski season ahead of the King's Birthday long weekend.

Yesterday · 16:49 UTC

OverviewOn May 13, 2026, Palo Alto Networks published a security advisory for CVE-2026-0257, a medium severity authentication bypass affecting PAN-OS and Prisma Access when a specific configuration is present. Successful…

Yesterday · 19:34 UTC

More Linux LPEsHark the age of the Linux LPE has arrived. This week’s release follows up on recent work bringing new Linux LPEs to Metasploit users. Copy Fail seemed to have kicked off a trend of similar bugs and hot on…

28 May 2026 · 13:00 UTC

This week on Experts on Experts, I’m joined by Sergio Alonso – Rapid7’s Director of Trust, Risk, and Compliance – to talk about how compliance is changing and why many security teams are rethinking the way they approach…

28 May 2026 · 10:00 UTC

The 2026 World Cup presents major cyber risks from ransomware groups, state-aligned actors, and other groups targeting critical infrastructure. Learn more here. The post 2026 World Cup: Discussing The World’s Biggest Gam…

27 May 2026 · 22:00 UTC

Unit 42 explores trends in data theft and extortion, outlining key strategies for organizations as frontier AI models advance. The post Out of the Crypt: The Evolving Cyber Extortion Economy appeared first on Unit 42.

27 May 2026 · 08:07 UTC

Yesterday · 07:00 UTC

What are the main risks for container environments: vulnerabilities, supply chain attacks, configuration errors; how to improve container security and how Kaspersky Container Security with the KIRA AI assistant can help.

28 May 2026 · 06:55 UTC

Our experts continue to track attacks targeting consumers of pirated content, both books and movies. 2026 saw the discovery of new target sites with tens of millions of visitors, while the miner gained a RAT module.

Yesterday · 03:04 UTC

The Mini Shai-Hulud campaign used malicious npm packages to target cloud and CI/CD credentials across developer environments. This report details the attack chain, detection opportunities, and mitigation guidance to help…

Today · 00:06 UTC

A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and detection opportuni…

Yesterday · 16:00 UTC

Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection. The post Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection appeared first on Microsoft Secu…

28 May 2026 · 15:00 UTC

Microsoft Threat Intelligence presents a comprehensive analysis of The Gentlemen, a Go-based ransomware deployed by affiliates of Storm-2697 that combines per-file ephemeral key encryption with an aggressive self-propaga…

28 May 2026 · 10:00 UTC

This white paper presents a concrete case study demonstrating the creation of a heap overflow vulnerability through the exploitation of the DICOM file format.

28 May 2026 · 18:00 UTC

In this newsletter, Thor breaks down why you should stop relying solely on CVSS and start using EPSS and GCVE to focus your patching efforts on the threats that actually matter.

27 May 2026 · 14:00 UTC

Talos researchers find 4 heap-based buffer overflow vulnerabilities in MediaArea's MediaInfoLib.

28 May 2026 · 18:57 UTC

Network administrators face a persistent challenge: maintaining domain blocklists and allowlists that keep pace with the internet. New websites and services emerge daily, and keeping these lists current requires constant…

28 May 2026 · 22:44 UTC

AWS Network Firewall now supports native attachment to AWS Transit Gateway. Customers commonly use Transit Gateway to route traffic from Amazon Virtual Private Cloud (Amazon VPC) networks to a centralized inspection VPC…

Yesterday · 03:00 UTC

OpenAI launches Rosalind Biodefense, expanding trusted access to GPT-Rosalind for vetted developers and U.S. government partners advancing biodefense, public health, and pandemic preparedness through frontier AI.

Yesterday · 12:00 UTC

Boston Children’s Hospital uses OpenAI technology to improve patient care, reduce operational burden, and help diagnose more than 40 rare disease cases.

Yesterday · 12:00 UTC

How Braintrust engineers use Codex with GPT-5.5 to run experiments and code faster.

Yesterday · 05:00 UTC

Yesterday · 05:00 UTC