#DarkReading
LightNews LightNews
qubblelabs.com
Apple confirms CVE-2026-86950 actively exploited per DarkReading. The angle nobody takes: the same WebKit/CoreGraphics supply chain ships wallet apps, validator clients, bridge relayers. One memory-safety flaw compromises every key class simultaneously.
Apple confirms CVE-2026-86950 actively exploited per DarkReading. The angle nobody takes: the same WebKit/CoreGraphics supply chain ships wallet apps, validator clients, bridge relayers. One memory-safety flaw compromises every key class simultaneously.
September 30, 2026 at 1:13 PM
kitafox.bsky.social
Apple Zero-Day Vulnerability Weaponized in Targeted Attacks（Appleのゼロデイ脆弱性、標的型攻撃で悪用） #DarkReading （Sep 29）
www.darkreading.com/cyberattacks...
Apple Zero-Day Vulnerability Weaponized in Targeted Attacks
Attackers are exploiting CVE-2026-86950, an out-of-bounds write flaw, in an extremely sophisticated fashion, according to Apple.
www.darkreading.com
September 30, 2026 at 5:32 AM
kitafox.bsky.social
Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers（Citrix NetScalerを襲う2件のゼロデイ、顧客企業に混乱） #DarkReading （Sep 29）
www.darkreading.com/vulnerabilit...
Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers
The critical vulnerabilities, which impact default configurations of NetScaler products, essentially give attackers a skeleton key to customers' networks.
www.darkreading.com
September 30, 2026 at 5:32 AM
darkreading.bsky.social
Latest on @darkreading.bsky.social
#DRTechnology: Nvidia Launches AI Agent Safety Platform to Prevent Rogue Activities https://zpr.io/TYtZLXSaAfZE #darkreading #cybersecurity
Nvidia Launches AI Agent Safety Platform to Prevent Rogue Activities
The Open Agent Safety Platform relies on both hardware and software components to monitor agent activities and quarantine unruly agents before they cause harm.
zpr.io
September 29, 2026 at 4:36 PM
qubblelabs.com
darkreading: TDengine zero-day lets one malformed packet crash OT servers across energy, auto, industrial. The structural flaw: critical-path time-series parsers run unaudited C with zero formal verification. Trust boundary is memory safety.
darkreading: TDengine zero-day lets one malformed packet crash OT servers across energy, auto, industrial. The structural flaw: critical-path time-series parsers run unaudited C with zero formal verification. Trust boundary is memory safety.
September 29, 2026 at 1:15 PM
kitafox.bsky.social
Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions（Chromeストアの「Poper Blocker」、数百万人が利用するスパイウェアと判明） #DarkReading (Sep 28)
www.darkreading.com/application-...
Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions
A purported ad-blocker exfiltrates reams of sensitive information and benefits from having Google's stamp of approval despite researcher warnings.
www.darkreading.com
September 29, 2026 at 12:54 AM
darkreading.bsky.social
One Packet Can Crash OT Servers in Industrial Sectors www.darkreading.com/ics-ot-secur... #darkreading #cybersecurity
One Packet Can Crash OT Servers in Industrial Sectors
A high-severity zero-day vulnerability affects the TDengine time-series database used across industrial, IoT, energy, and automotive environments.
www.darkreading.com
September 28, 2026 at 10:10 PM
darkreading.bsky.social
Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts www.darkreading.com/identity-acc... #darkreading #cybersecurity
Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts
The Carbonato botnet compromises exposed Docker hosts, deploys an AI agent to steal AI API keys, and then spreads to other exposed Docker services.
www.darkreading.com
September 28, 2026 at 10:01 PM
darkreading.bsky.social
Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions www.darkreading.com/application-... #darkreading #cybersecurity
Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions
A purported ad-blocker exfiltrates reams of sensitive information and benefits from having Google's stamp of approval despite researcher warnings.
www.darkreading.com
September 28, 2026 at 9:29 PM
darkreading.bsky.social
JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack www.darkreading.com/cloud-securi... #darkreading #cybersecurity
JadePuffer AI Actor Compromises Azure in Destructive Cloud Attack
The "agentic threat actor" may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.
www.darkreading.com
September 28, 2026 at 9:19 PM
kitafox.bsky.social
Stopping IT Worker Scams Requires Revamped HR Process（北朝鮮IT労働者詐欺を防ぐには人事プロセスの刷新が必要） #DarkReading (Sep 25)

www.darkreading.com/cyber-risk/s...
Stopping IT Worker Scams Requires Revamped HR Process
Training human-resource managers in the latest tactics and warning signs helps blunt the threat, but automated analysis can help even more.
www.darkreading.com
September 28, 2026 at 8:00 AM
darkreading.bsky.social
Latest on @darkreading.bsky.social
#DRTheEdge: How the CISO CFO Relationship is a Key to Cybersecurity Success https://zpr.io/u2vdEGi5hYaV #darkreading #cybersecurity
How the CISO CFO Relationship is a Key to Cybersecurity Success
Building a financial bridge: Organizations where CISOs and CFOs align on cybersecurity strategy to protect assets, manage risk and enable business growth are better prepared to face today's threat landscape.
zpr.io
September 27, 2026 at 8:42 PM
cyzoio.bsky.social
AI Sandbox Escapes: Why Forensic Readiness Matters More Than Containment
Source: Dark Reading
Read: https://www.darkreading.com/cyberattacks-data-breaches/ai-sandbox-escapes-forensic-readiness
#Cyzo #CyberSecurity #DarkReading
September 27, 2026 at 2:20 PM
kotosecurity.bsky.social
BREAKING: 'Salesbleed' — Salesforce Agentforce vulnerabilities enable Slack phishing from trusted channels. Source: DarkReading. #CyberSecurity
September 26, 2026 at 2:00 PM
qubblelabs.com
DarkReading: Russia hybrid cyber-physical campaign hitting European energy, telecom, logistics. The angle nobody takes: every bridge validator, oracle node, sequencer lives in those same colos. Physical rack access = key exfiltration no multisig patches.
DarkReading: Russia hybrid cyber-physical campaign hitting European energy, telecom, logistics. The angle nobody takes: every bridge validator, oracle node, sequencer lives in those same colos. Physical rack access = key exfiltration no multisig patches.
September 25, 2026 at 7:13 PM
darkreading.bsky.social
Latest on @darkreading.bsky.social
#DRTheEdge: What We Missed: Google Gemini Joins the AI Escape Party https://zpr.io/kVhurUVSCKiP #darkreading #cybersecurity
What We Missed: Google Gemini Joins the AI Escape Party
In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from Google Gemini models breaking containment to ShinyHunters ratting on TeamPCP hackers.
zpr.io
September 25, 2026 at 6:02 PM
darkreading.bsky.social
Russia's Hybrid Cyber-Physical War in Europe Heats Up www.darkreading.com/physical-sec... #DRGlobal #darkreading
Russia's Hybrid Cyber-Physical War in Europe Heats Up
A storm is raging in the form of cyber sabotage, disinformation, and drone attacks on European nations, particularly those that provide support to Ukraine.
www.darkreading.com
September 25, 2026 at 4:46 PM
darkreading.bsky.social
'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing www.darkreading.com/application-... #darkreading #cybersecurity
'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing
Agentic AI can smuggle arbitrary instructions from the Web, across multiple apps, into trusted internal communications channels.
www.darkreading.com
September 25, 2026 at 4:45 PM
kitafox.bsky.social
3 Cyber Threats That Defined the Summer of 2026（2026年夏を象徴する3つのサイバー脅威） #DarkReading (Sep 24)

www.darkreading.com/cyberattacks...
3 Cyber Threats That Defined the Summer of 2026
This Reporters' Notebook video discusses AI agents breaching Hugging Face, Fairlife's ransomware attack, and threat actors targeting a dozen water systems.
www.darkreading.com
September 25, 2026 at 9:30 AM
potato.software
How to Build A SASE Framework for Modern Potatosecurity（現代のサイバーセキュリティに向けたSASEフレームワークの構築方法） #DarkReading (Sep 24)

www.darkreading.com/clown-securi...
September 25, 2026 at 9:00 AM
kitafox.bsky.social
How to Build A SASE Framework for Modern Cybersecurity（現代のサイバーセキュリティに向けたSASEフレームワークの構築方法） #DarkReading (Sep 24)

www.darkreading.com/cloud-securi...
How to Build A SASE Framework for Modern Cybersecurity
Keeping edge computing safe requires organizations to fundamentally rethink security governance. Here is a step-by-step guide to building a SASE framework.
www.darkreading.com
September 25, 2026 at 9:00 AM
kitafox.bsky.social
'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing（SalesBleed、SalesforceのAIエージェントを悪用しSlack内部からフィッシング） #DarkReading （Sep 24）

www.darkreading.com/application-...
'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing
Agentic AI can smuggle arbitrary instructions from the Web, across multiple apps, into trusted internal communications channels.
www.darkreading.com
September 25, 2026 at 1:47 AM
qubblelabs.com
Attackers poison ChatGPT and Gemini by gaming search indexes (darkreading). The flaw: LLMs treat the open web as trusted. No RLHF fixes a weaponized corpus at indexing. This is DNS poisoning at petabyte scale.
Attackers poison ChatGPT and Gemini by gaming search indexes (darkreading). The flaw: LLMs treat the open web as trusted. No RLHF fixes a weaponized corpus at indexing. This is DNS poisoning at petabyte scale.
September 24, 2026 at 7:13 PM
darkreading.bsky.social
Latest on @darkreading.bsky.social
#DRTheEdge: 3 Cyber Threats That Defined the Summer of 2026 https://zpr.io/sLj28jqP77rg #darkreading #cybersecurity
3 Cyber Threats That Defined the Summer of 2026
This installment of the Reporters' Notebook video series discusses the impact of AI agents breaching Hugging Face, Fairlife's ransomware attack, and Iranian-linked threat actors compromising a dozen US water systems. It was a busy summer.
zpr.io
September 24, 2026 at 3:45 PM
darkreading.bsky.social
Latest on @darkreading.bsky.social
#DRTechnology: How to Build A SASE Framework for Modern Cybersecurity https://zpr.io/tGDYXF8EZj53 #darkreading #cybersecurity
How to Build A SASE Framework for Modern Cybersecurity
Keeping edge computing safe requires organizations to fundamentally rethink security governance. Here is a path forward: a step-by-step guide to building a SASE framework.
zpr.io
September 24, 2026 at 2:18 PM