Security Bulletin

Federal agencies given to July 17 to make the patches.

We're thrilled to unveil the latest evolution of Dark Reading's DR Global section — your go-to source for region-specific cybersecurity intelligence beyond North America.

The US government's restrictions on Anthropic and OpenAI frontier models have intensified calls in the UK and other countries to reduce their reliance on US tech companies, with significant cyber implications.

Here’s how the industry has come together to meet the challenges presented by agentic AI.

When combined with another exploit, the "PromptFiction" vulnerability, which has been fixed, could have enabled an end-to-end attack on a targeted system.

The sanctioned entities include First VPN Service (1VPNS), a virtual private network provider, and its administrator Dmytro Rashevskyi.

The cybercrime network operated on an industrial scale, utilizing at least 800 bank accounts and 120 business accounts, with 67 external accomplices acting as money mules.

The Gold Eagle initiative, established under a recent executive order promoting the secure use of advanced AI systems, brings together the White House, CISA, and the departments of Treasury and Defense with unnamed open-source software organizations...

The .me registry applied a serverHold status to the t.me domain, a registry-level action that prevents it from being published in the Domain Name System (DNS).

Security researchers at Stripe OLT discovered that version 7.0.18 of ModHeader included a hidden spyware SDK.

Iran allegedly abused Signaling System 7 (SS7), a set of protocols fundamental to 2G and 3G networks, to route calls and texts globally.

Simple age-old bugs give bad actors access to developers' secrets and source code-rich environments.