Security Awareness Training Isn’t Dead, but It Needs a Rethink A close examination of security awareness training reveals that its effectiveness is being questioned by experts in the field. Despite being a staple in every enterprise’s cybersecurity arsenal, successful attacks continue to rise, casting doubt on whether this type of training actually works. At its … Read more
Cisco’s latest security update is a massive one, with patches for 35 vulnerabilities across its products. Among these, over a dozen critical-severity bugs have been fixed, including several that could allow attackers to execute arbitrary code or cause denial-of-service (DoS) conditions without even needing to authenticate. The most severe of these vulnerabilities is CVE-2026-76464, which … Read more
A New Formula Predicts When AI Chatbots Can Turn Rogue, Raising Concerns Over Unchecked Autonomy A team of researchers from George Washington University has made a groundbreaking discovery that could revolutionize our understanding of artificial intelligence (AI) safety. By developing a mathematical formula to predict when an AI chatbot is at risk of turning rogue, … Read more
As Dark Reading’s editor-in-chief departs after 20 years at the helm, the cybersecurity community is left to ponder what this change will mean for one of its most trusted sources. Kelly Jackson Higgins, a veteran journalist with over three decades of experience in covering cybersecurity topics, has announced that she will be leaving her position … Read more
Russian-backed hackers have been busy updating their arsenal of malware tools, with a particular focus on refining a sophisticated downloader known as MatchBoil. This malware strain has been used in a series of targeted attacks against Ukrainian organizations across various industries, including transportation, manufacturing, and energy. The group behind these attacks, tracked by security researchers … Read more
A notorious cybercrime leader from Venezuela’s Tren de Aragua cartel has been arrested and arraigned by US authorities for his role in a massive “jackpotting” scheme that compromised ATMs with malware and dispensed tens of thousands of dollars in cash. Anibal Alexander Canelon Aguirre, also known as “Prometheus” and “The Engineer,” is the first cybercriminal … Read more
A newly patched vulnerability in AWS Bedrock AgentCore has left organizations with a potentially devastating cybersecurity risk. Dubbed “AgentCorruption,” this flaw allows an attacker to use just one AI chatbot to take control of an entire fleet of agents within an AWS environment, effectively gaining access to sensitive data and wreaking havoc on the organization’s … Read more
Raheim Hamilton, the co-creator of Empire Market, one of the largest dark web marketplaces before its shutdown, has been handed a 40-year prison sentence for facilitating over $430 million in illicit transactions between 2018 and 2020. The massive online black market was notorious for selling everything from counterfeit currency to stolen account credentials, computer hacking … Read more
As IT teams struggle to keep up with the ever-growing number of OAuth grants, a ticking time bomb is quietly accumulating in many organizations’ security profiles. Every day, employees click “Allow” on consent screens, creating new trust relationships between apps that can access corporate data. While these decisions take mere seconds, reviewing them properly requires … Read more
Russian Spies Give ‘MatchBoil’ Malware a Stealthy Facelift A sophisticated malware downloader, dubbed “MatchBoil,” has been given a significant makeover by a likely Russia-affiliated cyber-espionage group. The malware, used in campaigns targeting Ukrainian organizations across the transportation, manufacturing, and energy sectors, now boasts stronger obfuscation, sandbox checks, and evolving persistence mechanisms. UAC-0099, the threat actor … Read more