October 2026

The proliferation of enterprise apps and the centrality of cloud identity providers requires an identity security rethink.

Fahmida Y Rashid will keep the momentum going as she leads Dark Reading.

The all-stock deal brings Elisity’s least-privilege access technology into IonQ’s security portfolio.

The post IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion appeared first on SecurityWeek.

The vulnerability tracked as CVE-2026-85097 can allow threat actors to take control of the targeted WordPress websites.

The post Bricksforge WordPress Plugin Vulnerability Exploited in the Wild appeared first on SecurityWeek.

Some meetings last longer than it took attackers to jump on a newly disclosed security flaw this week. Within hours, they were already testing it. That’s not much time to read the warning, let alone do something about it.

But speed is only part of the problem. A secure connection didn’t always mean a safe destination. People offering to fix a ransomware mess had questions to answer themselves.

The personal AI agents rollout is going about as smoothly as expected: Amazon now blocks Meta’s Muse because it doesn’t identify itself as a bot while browsing; Instinct keeps raising privacy concerns; and the horror stories from pretty much every personal AI agent keep piling up.

Regardless, the tech world is mesmerized by the capabilities and potential of these services. Less than a year

Cryptocurrency hardware maker Ledger has temporarily paused sales of its products via CryptoBilis following reports of stolen funds linked to devices sold by the reseller.

On Friday, the company said it was investigating reports of loss of funds from users in Southeast Asia who had purchased products from CryptoBilis. The incident is said to have resulted in losses totaling more than $86

The outage hit the main Ubuntu and Canonical websites, including the Ubuntu blog and developer portal

The post Canonical Websites Disrupted in Second DDoS Attack This Year appeared first on SecurityWeek.

Oleg Korniev was a leader of YMCO, a sophisticated network of money mules that helped hackers move funds outside the US.

The post Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US appeared first on SecurityWeek.

Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers.

The post iRhythm Data Breach Impacts at Least 360,000 People appeared first on SecurityWeek.