Tech news

Security technology news

Headlines from leading security publications and research teams, refreshed automatically. Choose a category to narrow them.

Updated automatically every 6 hours. Last update 2 Nov 2026, 05:35 IST · 13 sources · Get these by email

AI security Fuzzers vs. AI: Comparing Fuzzilli and BigSleep on JavaScript EnginesSummary Project Zero compared two automated tools used by Google to find vulnerabilities in Chrome’s JavaScript engine, V8, on a regular basis. Fuzzilli is a generative JavaScript engine fuzzer and BigSleep is an LLM-based bug finding system. In the past six months, BigSleep found more… Google Project Zero · Global · 27 Oct 2026
AI security So Many AI Security Benchmarks, but None Tell the Whole StoryMeasuring artificial intelligence model security gets complex, fast, thanks to a growing patchwork of benchmarks targeting different variables in the equation. But none replace testing against your own code and workflows. Dark Reading · Global · 27 Oct 2026
AI security Risks & Rewards: How AI Is Redefining the CISO's RoleNvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks. Dark Reading · Global · 26 Oct 2026
AI security In-the-Wild Attack Abuses AI Agents' Trust in MarkdownA new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions. Dark Reading · Global · 26 Oct 2026
Cloud & SaaS 'Gheist' Weaponizes GitHub Tokens to Steal Cloud SecretsAn ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories. Dark Reading · Global · 26 Oct 2026
Vulnerabilities & exploits 10 Software Security Practices Built for the Next 250 YearsThis Cybersecurity Awareness Month's theme, "Securing the Next 250," asks us to look beyond vulnerabilities and consider what will make our digital systems resilient for generations. Dark Reading · Global · 26 Oct 2026
AI security Bias in Qwen3-Coder ModelInteresting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what it writes changes. For the first time, we showed that this vulnerability lives in the model’s weights, and that… Schneier on Security · Global · 26 Oct 2026
Policy, regulation & law enforcement Friday Squid Blogging: Increasing Squid PopulationsThis article in Nature argues that it’s due to an overfishing of predators and warming sea temperatures. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy. Schneier on Security · Global · 23 Oct 2026
AI security Trust Is Not What It Seems — and Fraudsters Are Counting on ItThreat actors don't need to rely on malware to breach organizations anymore. They're simply calling help desks and politely asking for access, with a little help from artificial intelligence. Dark Reading · Global · 23 Oct 2026
Applications & supply chain Exposed to PHP2Shell? Cyber Experts Weigh in With AdviceFixing the critical PHP flaws is not as simple as clicking "Update." Here's how to assess your risk, and what you can do to protect yourself. Dark Reading · Global · 23 Oct 2026
Identity & access Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooksMicrosoft Threat Intelligence analyzes the LiteLLM 1.107.0 compromise, including Python startup hooks, credential theft, remote code loading, detections, and mitigations. The post Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks appeared first on… Microsoft Security Blog · Global · 23 Oct 2026
AI security AI Tools Are Generating Massive Attacks for Little CostOne campaign targets 105 sites using open-weight models; in another, public models gained full domain control for $12. Cyber-defense will have to change. Dark Reading · Global · 23 Oct 2026
Vulnerabilities & exploits Why Caribbean Threats Cascade Into Global Cyber-RiskThe region is demonstrating what happens when exploits accelerate but assurance does not. Dark Reading · Global · 23 Oct 2026
AI security Cyber Insurance's New Reality: Underwriting Isn't EnoughRising AI, social engineering, and cloud risks are pushing carriers beyond risk transfer and deeper into cybersecurity itself. Dark Reading · Global · 23 Oct 2026
AI security AI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security StackMicrosoft's Project Perception adds Guardian Agents to monitor and contain anomalous AI agents, but experts warn that policing unpredictable agents with other agents may compound — not contain — the risk. Dark Reading · Global · 23 Oct 2026
Policy, regulation & law enforcement Compromised TLS CertificatesThe Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private… Schneier on Security · Global · 23 Oct 2026
Threats, ransomware & breaches State Bank of India Suffers a Customer PII Data LeakRelatively small data breaches in India can turn quite serious, thanks to a sophisticated underground market for trading PII. Dark Reading · Global · 23 Oct 2026
AI security Microsoft Links Storm-0940 to ConnectWise Supply Chain AttackThe China-linked actor used an AI-enabled penetration-testing tool to automate and accelerate its attack on more than 2,200 tenants. Dark Reading · Global · 22 Oct 2026
Industry & products What We Missed: Feds Lasso Texas Laptop FarmsIn this video, Dark Reading editors discuss some of the news they didn't get a chance to cover, from busting up North Korea's stateside infrastructure in "Operation Lonestar Justice" to Staples' gift card bonanza. Dark Reading · Global · 22 Oct 2026
OT, ICS & IoT Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jourDes centaines de magasins ont subi des pertes se chiffrant en millions d'euros parce qu'ils avaient fait appel à des tiers pour gérer le micrologiciel OT obsolète qui pilotait leurs systèmes de climatisation. Dark Reading · Global · 22 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.