A practitioner's breakdown of the CSRF attack: how the forged request works, two documented exploits, a manual test, and the ...

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't ...

North Korean hackers are targeting open source software developers with a backdoor and an information stealer as part of a ...

Attackers are now exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, according to ...

Threat actors are exploiting a vulnerability in Gitea’s reverse-proxy authentication mechanism to access internet-accessible instances by supplying only a valid username.

LayerX found that BioShocking could trick AI browsers into leaking credentials by disguising malicious prompts as game rules.

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading ...

Plecost detects vulnerabilities in WordPress installations — core, plugins, and themes — and correlates findings against a daily-updated local CVE database. It runs as a CLI tool, a Python library, or ...

5 Min Read by Robert Lemos, Contributing Writer Application Security New Initiative Tackles Security for End-of-Life Open Source Software Jun 26, 2026 | 3 Min Read ...

The purpose of this roadmap is to give you an idea about the landscape. The road map will guide you if you are confused about what to learn next, rather than encouraging you to pick what is hip and ...