Security Bulletin

As enterprises move toward AI-driven operations, identity modernization becomes essential.

Because AI agents are neither human nor traditional machines, they must be treated as a third class of identity.

A purported leak exposing 5.8 million records of Uruguayan citizens is the latest incident where cybercriminals targeted government agencies to monetize citizen data.

Attackers are using AI to dramatically reduce the time they need to develop a working exploit for a CVE, according to new research.

The release includes implementations of ML-KEM and ML-DSA, two quantum-secure algorithms, along with the formal verification libraries and tools Apple developed.

Teams can mitigate BECs by better understanding their company’s attack profile.

First identified in February 2025, BTMOB evolved from the SpySolr malware.

The Ransomnews Research Team's five-year study, spanning from May 2021 to May 2026, analyzed over 65,000 exposed databases, finding that 46.3% contained ransom or wipe notes.

An anonymous source alerted TechCrunch to a security lapse on the UK Visa Portal website, stating that at least 100,000 documents, including passports and selfies, are exposed.

The Linux community had raised concerns that the open-source nature of the software, lacking commercial ownership and centralized account infrastructure, would make enforcing such a policy difficult.

The cybersecurity industry of 2006 barely resembled today's billion-dollar behemoth. As part of Dark Reading's 20th anniversary celebration, we trace the industry's evolution through a technology lens.