CISA added CVE-2026-45659 SharePoint Server RCE to KEV following confirmed exploitation, requiring U.S. agencies to patch by ...

Explore the latest news and expert commentary on Endpoint Security, brought to you by the editors of Dark Reading ...

Amazon Q vulnerability could allow attackers to steal developer cloud credentials by luring them into opening a booby-trapped ...

Microsoft DART uncovers dual threat actors in a single intrusion, revealing how blended tactics conceal attacks and ...

Separate actors exploited the same exposure, creating overlapping intrusions that obscured detection and response.

Explore the latest news and expert commentary on Application Security, brought to you by the editors of Dark Reading ...

A security researcher has disclosed details of a severe Visual Studio Code (VS Code) vulnerability that can be exploited to steal a user’s GitHub token and access their repositories. The vulnerability ...

Official support for Windows 10 has ended, and its security certificates are expiring. Your system is at risk, and Microsoft ...

Cybersecurity researchers have flagged a new class of CI/CD workflow weakness that allows attackers to hijack workflows and compromise open-source supply chains. The "critical exploitable pattern" has ...

Article and title updated as 3 additional zero-days were fixed in the June 2026 Patch Tuesday. Today is Microsoft's June 2026 Patch Tuesday, with security updates for 200 flaws, including five ...

BotBuddy is a dark cyberpunk-themed WPF desktop application designed as an interactive educational chatbot for cybersecurity learning. The application combines conversational AI with gamified features ...

Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for the public transport ...