Security Bulletin

Kriminal operates on the clearnet, offering various subscription tiers and pay-per-message options.

The campaign, observed in late July 2026, begins with compromised WordPress websites injected with obfuscated ErrTraffic JavaScript.

The banking Trojan, post-law enforcement takedown, is sprucing itself up with features that make detection and analysis harder.

A malicious Google Apps Script sidebar leads to payloads for both macOS and Windows.

The Cisco-led AI Workforce Consortium shares new research on AI agents and cybersecurity. This spotlight report covers the shifting threat landscape, evolving job roles, critical skills, and how learning must adapt to prepare the workforce.

Congress wants an AI ‘kill switch’ – but we really need identity-based access.

July was an Antares month, with a parallel thread on smarter evaluation. Here's what we shipped. Antares (technical report). A family of compact, open-weight models (350M, 1B, and 3B) built for one job: agentic vulnerability localization. Given...

The AI company officially forbids illicit use, while offering guardrail-free social engineering, offensive cybercrime, and OSINT scanning to anyone with a bit of cryptocurrency.

Katie Moussouris of Luta Security talks with the Dark Reading News Desk about how enterprises will now need to monitor risks posed by their own agents in the wake of the recent Hugging Face attack.

Align Security Accountability with Decision Authority

Medusa ransomware hit 500-plus victims, exploiting critical flaws at increasing speed.

In healthcare, AI adoption requires trust. Learn how Cisco Compatible Solutions for AI combines secure infrastructure with validated partners to help organizations deploy AI with confidence and protect sensitive data.