Security News

darkreading Mar 26, 2026 at 15:29

How Organizations Can Use Blunders to Level Up Their Security Programs

The industry highlights how organizations repeatedly make common security mistakes but one session during RSAC detailed ways to avoid them.

Read Article

darkreading Mar 26, 2026 at 14:44

AI-Powered Dependency Decisions Introduce, Ignore Security Bugs

AI models often hallucinate or make costly mistakes when tasked with recommending software versions, upgrade paths, and security fixes — leading to significant technical debt.

Read Article

darkreading Mar 26, 2026 at 12:04

Intermediaries Driving Global Spyware Market Expansion

Third-party resellers and brokers foil transparency efforts and allow spyware to spread despite government restrictions, a study finds.

Read Article

darkreading Mar 25, 2026 at 21:52

At RSAC, the EU Leads While US Officials Are Sidelined

While US government sits out this year, EU officials are on the ground in San Francisco leading the conversations on today's top cybersecurity challenges.

Read Article

darkreading Mar 25, 2026 at 16:03

Blame Game: Why Public Cyber Attribution Carries Risks

Publicly accusing an entity of a cyberattack could have negative consequences that organizations should consider before taking the plunge.

Read Article

darkreading Mar 25, 2026 at 15:05

Phishers Pose as Palo Alto Networks' Recruiters for Months in Job Scam

A series of campaigns that began in August aim to defraud job candidates, using psychological tactics and data scraped from LinkedIn profiles.

Read Article

darkreading Mar 25, 2026 at 14:40

SANS: Top 5 Most Dangerous New Attack Techniques to Watch

For the first time, SANS Institute's five top attack techniques all have one thing in common – AI.

Read Article

darkreading Mar 25, 2026 at 14:09

Why a 'Near Miss' Database Is Key to Improving Information Sharing

Organizations disclose attack details, though information may be limited, following a breach, but what if they did the same with close calls?

Read Article

darkreading Mar 25, 2026 at 12:26

AI-Native Security Is a Must to Counter AI-Based Attacks

Attacks by artificial intelligence agents are a reality. Experts at Nvidia's GTC conference say defenders need to use the same tools to fight them off.

Read Article

darkreading Mar 25, 2026 at 11:55

Ex-NSA Directors Discuss 'Red Line' for Offensive Cyberattacks

Four former NSA chiefs representing a near-complete history of US Cyber Command debated and discussed the role of offensive cyber in the government.

Read Article

darkreading Mar 25, 2026 at 05:00

Iran Hacktivists Make Noise but Have Little Impact on War

Iran-aligned groups are trying to make their mark in the Gulf, but the results have fallen short of remarkable.

Read Article

darkreading Mar 24, 2026 at 22:34

CSA Launches CSAI Foundation for AI Security

Cloud Security Alliance creates dedicated nonprofit to govern autonomous AI agent ecosystems through risk intelligence and certification

Read Article

darkreading Mar 24, 2026 at 21:28

Checkmarx KICS Code Scanner Targeted in Widening Supply Chain Hit

TeamPCP is the likely cyber threat actor behind attacks on Trivy, Checkmarx's KICS and VS Code plug-ins, and the LiteLLM AI library — and all signs point to more attacks to come.

Read Article

darkreading Mar 24, 2026 at 21:25

How AI Coding Tools Crushed the Endpoint Security Fortress

Security vendors have spent years building up defenses around the endpoint, but one researcher says AI coding tools have brought the walls down.

Read Article

darkreading Mar 24, 2026 at 14:59

GitHub 'OpenClaw Deployer' Repo Delivers Trojan Instead

An AI-assisted campaign is spreading more than 300 poisoned packages for diverse assets ranging from developer tools to game cheats.

Read Article

darkreading Mar 24, 2026 at 13:16

How a Large Bank Uses AI Digital Twins for Threat Hunting

JPMorgan Chase uses digital fingerprints and digital twins to spot online attackers and malicious behaviors while also reducing pesky false alerts.

Read Article

darkreading Mar 24, 2026 at 12:28

Microsoft Proposes Better Identity, Guardrails for AI Agents

Companies need better controls to manage key threats rising from the growth of agentic AI. These new features provide a starting point.

Read Article

darkreading Mar 23, 2026 at 22:07

AI in the SOC: What Could Go Wrong?

Two cybersecurity leaders tested out AI in their respective SOCs for six months — and here's what they learned.

Read Article

darkreading Mar 23, 2026 at 21:43

Trivy Supply Chain Attack Targets CI/CD Secrets

A threat actor used the open source security tool to deploy an infostealer into CI/CD workflows and steal cloud credentials, SSH keys, tokens, and other sensitive secrets.

Read Article

darkreading Mar 23, 2026 at 21:40

Ransomware's New Era: Moving at AI Speed

Threat actors bypass security tools and use AI to launch faster ransomware attacks that exploit valid credentials and target data

Read Article