darkreading

It might still sound far-fetched to say AI can develop critical thinking skills and help us make decisions in the cybersecurity industry. But we're not far off.

A server-side request forgery (SSRF) bug in Microsoft's tool for creating custom AI chatbots potentially exposed info across multiple tenants within cloud environments.

CodeBreaker technique can create code samples that poison the output of code-completing large language models, resulting in vulnerable — and undetectable — code suggestions.

Two congressmen want the US Commerce Department to examine the company's goods and decide if they pose a threat.

Vulnerability gave attackers with access to a pod a way to obtain credentials and other secrets.

The company has released little information on the breach, but claims it's been in contact with the individuals affected.

A 7-month-old bug in an OSS CI/CD server is still being actively exploited, thanks to spotty patching, CISA warns.

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

By moving beyond guidelines and enforcing accountability, encouraging innovation, and prioritizing the safety and well-being of our communities in the digital age, we can build a more secure software future.

Feds confirmed Iran's involvement in the email attack against Roger Stone after Microsoft, Google reported Iranian APT action against both presidential campaigns.

Charming Kitten goes retro and consolidates its backdoor into a tighter package, abandoning the malware framework trend.

While the combined gross domestic product (GDP) of African nations grew fivefold in two decades, a lack of cybersecurity is holding back gains — although the jury is out on how much.

Outlook, Teams, PowerPoint, OneNote, Excel, and Word undermine macOS's strict user permission-based privacy and security protections.

Multifactor authentication enforcement for Azure portal, Microsoft Entrata admin center, and Intune admin center will begin October.

What is a Verizon Wireless demo store app doing on non-Verizon phones, and why is it a vehicle to an attacker?

Cyber incidents like this highlight the need for tougher action on companies that fail to adequately protect consumer data.

The US needs to seize this moment to set a global standard for responsible and ethical AI, ensuring that technological progress upholds and advances human rights.

AI jailbreaks are not vulnerabilities; they are expected behavior.

The last known cyberattack waged against Iranian infrastructure took place last December with the blame placed on Israel and the US.