A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous ...
State-sponsored hackers used compromised South Korean websites to exploit AnySign4PC and install SIGNBT or COPPERHEDGE ...
The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor ...
Russian hackers exploit CVE-2026-42897 in OWA to deploy OWAReaper, a browser implant that persists through credential ...
The OWAReaper implant can establish server-side mailbox permissions that remain after credentials are changed and affected ...
The intrusions happened through three Claude models: Opus 4.7, Mythos 5, and an internal research prototype. Opus 4.7, the ...
Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals ...
A Russia-aligned espionage group has resurfaced after months without observed activity, using a half-click exploit against on ...
Russian state hackers are using a maximum-severity vulnerability in Microsoft’s Outlook’s Exchange Server to backdoor ...
Opinion
Stop Writing Incident Reports, Start Writing Case Law: Gaps from OpenAI and Hugging Face Disclosure
Reading the OpenAI agent breach as case law: five elements mapped across OWASP Agentic Top 10, MITRE ATLAS, CSA MAESTRO, and the NIST AI RMF.
Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results