Vulnerabilities in Salesforce Agentforce, collectively dubbed “Salesbleed” by researchers, could expose customers’ internal data and, worse, allow attackers to phish employees from within trusted company channels. As so often happens with powerful, interconnected AI platforms that excite customers and investors,… Read More "‘Salesbleed’ Exploits Salesforce Agents to Enable Slack Phishing"
Six npm Packages Read C2 Addresses From Ethereum Wallet
Six npm packages have been found querying an attacker-controlled Ethereum wallet to work out where to fetch their next stage of malware, reading command-and-control (C2) addresses out of a blockchain transaction. Sonatype Research Labs identified the packages on August 10… Read More "Six npm Packages Read C2 Addresses From Ethereum Wallet"
Stopping IT Worker Scams Requires Revamped HR Process
When a suspected North Korean operative applied for a remote AI engineering position at human-risk management firm Nisos in June 2025, the company decided to run its own operation on the fraudster. Nisos notified law enforcement, conducted an HR interview,… Read More "Stopping IT Worker Scams Requires Revamped HR Process"
Microsoft Fixes 400 Flaws on August Patch Tuesday
Microsoft turned up the heat on sysadmins for the second month in a row on August 11 with a Patch Tuesday comprising 400 CVEs, including one actively exploited zero-day vulnerability. The figure is not quite as high as the record… Read More "Microsoft Fixes 400 Flaws on August Patch Tuesday"
What We Missed: Google Gemini Joins the AI Escape Party
Google’s Gemini AI has become the latest example of agentic AI frontier models breaking out of testing environments and hacking organizations on their own. In this episode of “What We Missed,” Dark Reading’s Rob Wright, news director, and Alex Culafi,… Read More "What We Missed: Google Gemini Joins the AI Escape Party"
Microsoft Releases Emergency Patch to Fix RDS Vulnerability
IT teams received a boost this week after Microsoft fixed some significant issues with Remote Desktop Services (RDS), Hyper-V and other products. The problems started with this month’s Patch Tuesday, issued on September 8, which included fixes for a record… Read More "Microsoft Releases Emergency Patch to Fix RDS Vulnerability"
CISO and CFO Partnerships Drive Security Success
The relationship between the chief information security officer (CISO) and the chief financial officer (CFO) has evolved from a transactional, enterprise-budgetary conversation to a strategic alliance that shapes an organization’s security posture and business resilience. This transformation underscores the importance… Read More "CISO and CFO Partnerships Drive Security Success"
AI the Top Priority for New Spend as Cyber Budgets Flatline
AI is the biggest priority for net-new budget dollars, with around a quarter of US CISOs expecting to aggressively grow their spend next year, according to new data from IANS. The cyber research and advisory firm compiled its 2026 Security… Read More "AI the Top Priority for New Spend as Cyber Budgets Flatline"
Chrome Store Hosts ‘Poper Blocker’ Spyware Downloaded by Millions
Millions of people have downloaded infostealers disguised as legitimate ad-blocking browser extensions, in part because Google has provided them with seals of approval on the Chrome Web Store. That’s the word from Bay Area Labs, which uncovered one such app,… Read More "Chrome Store Hosts ‘Poper Blocker’ Spyware Downloaded by Millions"
Black Axe Members Extradited to US Over Internet Fraud Claims
Five alleged leaders of the Black Axe criminal organization have been extradited from South Africa to the US to face charges over romance scams, advance-fee fraud and money laundering. The US Department of Justice (DoJ) said the five Nigerian nationals… Read More "Black Axe Members Extradited to US Over Internet Fraud Claims"