⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from Google Gemini models breaking containment to ShinyHunters ratting on TeamPCP hackers.
In this article Attack overview Technical analysis Mitigation and protection guidance References Learn More Microsoft Security Research has identified malicious cloud activity associated with JADEPUFFER, a threat actor discovered by Sysdig in July 2026 and reported to be the first documented agentic ransomware operation. Our investigation found an extensive Azure-focused resource destruction activity using compromised service principals and cloud credential collection that could be used to facilitate future exfiltration.
This article discusses the build versus buy decision for threat detection content, recommending a hybrid approach where commodity detections are purchased and unique ones are built in-house. It emphasizes measuring both by time-to-coverage and provides a table of factors to guide the decision.
The CEO said the company has a User Protection Fund that has over $464 million and those funds will be used to cover the losses.
LinkedIn is introducing new trust and verification features to combat fake profiles and work histories enabled by generative AI. These include colleague vouching, employer control over false affiliations, and workplace verification requirements.
AI-powered cyber attacks use artificial intelligence to automate tasks like writing convincing phishing emails, cloning voices, and evading detection, making attacks cheaper and harder to fingerprint. This lowers the barrier for less skilled attackers to launch sophisticated campaigns.