The Underminr vulnerability allows attackers to hide malicious connections behind trusted domains, potentially affecting 88 million domains worldwide.
Palo Alto Networks researchers demonstrated how attackers can exploit excessive default permissions in Google Cloud's Vertex AI to steal credentials, exfiltrate sensitive data, and access restricted internal infrastructure.
The Iran-backed hacktivist group Handala claims to have erased data from over 200,000 Stryker systems across 79 countries, sending more than 5,000 workers home in Ireland and disrupting U.S. surgical supply chains.
Dark Reading Editor-in-Chief Kelly Jackson Higgins reflected on RSAC 2026, noting that agentic AI arrived far sooner than the industry expected, leaving most companies playing catch-up while threat actors continue to raise the stakes.
With no US federal government representation at RSAC 2026, European Union regulators stepped in to fill the void as CISOs grapple with AI-driven threats, quantum computing, and a rapidly shifting geopolitical landscape.
With the US and Iran reaching a fragile ceasefire, security researchers warn that pauses in kinetic conflict historically do little to slow — and often accelerate — cyber operations from state-aligned threat actors.
Toy giant Hasbro disclosed unauthorized network access in an SEC 8-K filing dated March 28, 2026, warning that business continuity measures may remain in place for several weeks and could cause some delays.
Despite record spending and expanding security teams, breach counts and economic losses keep rising. A San Francisco panel of five security executives identified the flawed assumptions undermining the entire industry.
Authorities across three countries have taken down infrastructure supporting four botnets — Aisuru, Kimwolf, JackSkid, and Mossad — that compromised over three million IoT devices and launched hundreds of thousands of DDoS attacks.
Nearly one in three cyber intrusions now involve valid employee credentials, and AI is making these attacks faster and cheaper than ever. Security teams must fundamentally rethink how they detect and respond to identity-based threats.