Illinois Representative Delia Ramirez has been appointed as the top Democrat on the House Homeland Security Committee's Cybersecurity and Infrastructure Protection Subcommittee, replacing Eric Swalwell following his resignation from Congress.
A new malware-as-a-service platform called Venom Stealer automates every stage of ClickFix-style social engineering attacks, from initial infection to cryptocurrency wallet draining, for as little as $250 a month.
Cisco Talos has uncovered a widespread credential theft campaign by threat cluster UAT-10608, which exploits CVE-2025-55182 in Next.js apps and deploys an automated tool called NEXUS Listener to exfiltrate secrets from at least 766 compromised hosts.
Reddit CISO Frederick Lee and Omdia principal analyst Dave Gruber explain how AI is delivering real value in cybersecurity today — from automating runbooks to accelerating threat intelligence — and what risks organizations must still navigate.
A cybercrime group called TeamPCP has deployed a self-propagating worm that wipes data on systems configured for Iran's timezone or Farsi language, while also conducting supply chain attacks against cloud security tools Trivy and KICS.
A chief medical information officer at San Joaquin General Hospital told RSAC 2026 attendees that preparation and repeated rehearsal—not just downtime playbooks—are what truly determine whether a ransomware attack on a healthcare facility escalates or stabilizes.
AI dominated conversations at RSAC 2026 Conference, but new research reveals that cybersecurity professionals face mounting stress, widening skills gaps, and growing complexity — making the human factor more critical than ever.
Cybercriminals on platforms like Telegram and Discord are increasingly using emojis to signal, obfuscate, and coordinate malicious activity, bypassing keyword filters and complicating automated monitoring efforts.
A threat actor used AI-assisted automation to launch more than 500 malicious pull requests against GitHub repositories, compromising at least two NPM packages in a campaign tracked as 'prt-scan.'
Apple has broken with its usual patching practice by extending fixes for the DarkSword exploit chain to iOS 18 users who have not upgraded to iOS 26, following the tool's leak on GitHub on March 22.