Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
When deploying AI agents with Amazon Bedrock AgentCore, organizations benefit from built-in support for OAuth 2.0, AWS IAM, and API key authentication through AgentCore Gateway. However, some enterprise environments still rely on legacy authentication mechanisms such as HTTP Basic Authentication.
Researchers discovered a meta-hacking technique called CoSnitch that can manipulate Microsoft Copilot into revealing its own security weaknesses. The attack exploits AI assistants to map out internal architecture and identify vulnerabilities by tricking the AI service into disclosing sensitive information about its security posture.
Comcast is promoting WiFi-based motion detection as a part of its new Xfinity Shield home protection platform, allowing routers and wireless devices to detect people moving through a home without cameras or motion sensors.
Rich Mogull, chief analyst with the Cloud Security Alliance, joins the Dark Reading News Desk with what defenders need to take away from AI agents escaping their environments to launch attacks.
In August 2026, the actor TheHatman claimed to have stolen large volume of credentials from organizations' Microsoft Entra tenants. We provide guidance on mitigating large-scale credential attacks.
A new docuseries titled Declassified reveals the human toll of cybersecurity leadership, with CISOs sharing candid stories about million-dollar heists, career-ending burnout, and divorce. The series provides a behind-the-scenes look at the emotional and professional challenges faced by security executives, highlighting the often-hidden personal costs of defending organizations against cyber threats.