Organizations running on-premises Microsoft Exchange Server are facing a five-day-old zero-day with no permanent fix in sight and a growing list of side-effects from the only protection currently ...

This article is an introduction to a tool I created as my own answer to that question, called "memola". In short, it is a bookmarklet that runs Notion-like notes + databases + AI chat, based on ...

Article and title updated as 3 additional zero-days were fixed in the June 2026 Patch Tuesday. Today is Microsoft's June 2026 Patch Tuesday, with security updates for 200 flaws, including five ...

Your weekly cybersecurity recap: a GitHub supply chain worm, an exploited Android flaw, Instagram account takeovers, and a ...

Now sites have a new way to spy on their visitors: measuring subtle interactions with their solid-state drives. The technique, named FROST (fingerprinting remotely using OPFS-based SSD timing), allows ...

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...

A new supply-chain attack has infected 36 packages on the Node Package Manager (npm) index with infostealer malware called IronWorm. The malware targets 86 environment variables (key-value pairs) and ...

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading ...

The Belarus-aligned threat actor known as Ghostwriter (aka UAC-0057 and UNC1151) has been observed using lures related to Prometheus, a Ukrainian online learning platform, to target government ...

A shared task list in a Teams chat and the same task list on a Loop page update each other in real time, which is a different model from the usual copy-paste approach. Whether Loop replaces your ...