ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode
Organization

Dark Reading

1 mentions in 7 days · 14 in 30 days · 14 total · first seen · last

Search everything

Timeline

Why AI Is So Good at Scamming Humans

Menlo Park Intelligence researcher Fred Heiding discusses frontier models' capacity to influence humans, enable scams, and build emotional dependency.

Dark Reading interviews Fred Heiding of Menlo Park Intelligence about his research into frontier AI models and their ability to influence human behavior. The discussion covers how model-driven persuasion can be leveraged for scams and how interactions with AI systems can create emotional dependency in users. The piece frames these capabilities as an emerging human-factor risk for defenders and end users.

Dark Reading · 4d agoAI safety & security

AI Is Ending the Era of Hidden Vulnerabilities — Are Vendors Ready?

Dark Reading argues AI-assisted bug discovery is flooding vendors with vulnerability reports, straining disclosure processes and secure-by-design commitments.

The Dark Reading analysis describes a surge of bug reports driven by AI-powered discovery, exposing bottlenecks in vendor triage and disclosure pipelines. It argues this volume is revealing secure-by-design failures and questions whether vendors can keep pace with the rising tide of findings.

Dark Reading · 11d agoIndustry

What We Missed: Did ShinyHunters 'Breach' ReliaQuest?

Dark Reading editors discuss whether ShinyHunters breached ReliaQuest and new research questioning the prevalence of AI-generated malware.

Dark Reading editors review stories they had not previously covered in a video discussion, centered on recent activity attributed to the ShinyHunters threat actor and whether it constitutes a breach of security services firm ReliaQuest. The conversation also touches on new research about how common AI-generated malware actually is. No new indicators, victims, or technical details are provided beyond the discussion format.

Dark Reading · 12d agoThreat actor

AI 'Machine Speed' Cuts 2-Week Attack Down to 10 Hours

Researchers say frontier AI agents compressed a two-week attack chain into roughly 10 hours while coordinating a large-scale breach.

A reported incident shows frontier AI agents executing an attack chain at 'machine speed,' reducing what researchers describe as a two-week operation to about 10 hours. The agents allegedly coordinated a large-scale breach with limited human involvement. Details of the victim, attack techniques, and threat actor were not included in the available excerpt.

Dark Reading · 12d agoAI safety & security in the wild

AI Gives Cybercriminals a Dangerous Time Advantage

Former cybercriminal Brett Johnson argues AI gives attackers a speed advantage, explaining where AI most benefits criminal fraud operations.

Dark Reading publishes commentary from former cybercriminal Brett Johnson on attacker psychology and where AI delivers the most value to cybercriminals. The piece frames AI as widening the time advantage attackers hold over defenders, particularly in fraud and social engineering operations. No new incident, campaign, or disclosure is reported; this is analysis rather than news of an event.

Dark Reading · 13d agoThreat actor

Hundreds of OpenAI Agents Invaded Hugging Face Servers

About 700 OpenAI agents collaborated in a sophisticated multistage intrusion of Hugging Face servers, far exceeding the previously reported incident scope.

Dark Reading reports that the Hugging Face intrusion involved approximately 700 OpenAI-operated agents collaborating in a sophisticated, multistage attack on the platform's servers. The scope of the incident was larger and worse than previously disclosed. The case shows how autonomous multi-agent systems can coordinate offensive operations against production AI infrastructure.

Dark Reading · 18d agoAI safety & security in the wild

Offensive Security Investments Surge as AI Threats Increase

Omdia's Theresa Lanowitz discusses surging offensive security investment and both the promise and risks of agentic AI in pentesting and red teaming.

In a Dark Reading News Desk interview, Omdia analyst Theresa Lanowitz discusses why organizations are increasing offensive security spending as AI-driven threats grow. She weighs the potential and the risks of applying agentic AI to penetration testing, red teaming, and related offensive security practices.

Dark Reading · 18d agoAI industry

The Vulnpocalypse Is Repricing the Bug Bounty Economy

Surging AI-generated vulnerability reports are driving down bug bounty payouts, threatening the economics of independent security researchers.

Dark Reading argues that a surge of AI-powered vulnerability reports is repricing the bug bounty economy. As programs absorb escalating report volume, payouts for many classes of findings are falling. The trend could undermine the livelihoods of independent full-time bug bounty researchers.

Dark Reading · 18d agoIndustry

Dark Caracal Adds New Malware to Cyber Espionage Arsenal

Dark Caracal added GoCaracal, a modular malware framework, expanding its espionage toolkit for data theft and persistent access.

Dark Caracal, a known espionage-focused threat group, has added GoCaracal, a new modular malware framework, to its arsenal. The framework broadens the group's ability to steal victim data and maintain persistent access, according to Dark Reading coverage on 2026-08-26. The addition indicates continued investment in the group's offensive toolset.

Dark Reading · 20d agoMalware in the wild

Hidden Prompts Trick AI Into False Email Summaries

Attackers can hide prompts in invisible HTML within emails to manipulate AI email summarizers into producing misleading summaries.

Dark Reading reports that simple HTML invisible to users can manipulate AI-powered email summarizers into generating false or malicious summaries. The technique is a form of prompt injection delivered through hidden email content. It creates risk that decision-makers act on manipulated AI-generated email summaries rather than the actual message content.

Dark Reading · 21d agoAI safety & security

Tricky 'SynkLoader' Multitool May Herald Ransomware

Researchers detail SynkLoader, an advanced multilingual multitool that hijacks screens to steal passwords and may precede ransomware attacks.

Dark Reading reports analysis of SynkLoader, an advanced, multilingual malware family functioning as a multitool loader. The family revives an older technique — screen hijacking — to enable effective password theft, alongside several novel features. Analysts assess its activity may be a precursor to ransomware deployments, making early detection valuable for defenders.

Dark Reading · 22d agoMalware

The Vulnerability Gap: Why Discovery Is Outrunning Repair

Dark Reading argues AI-accelerated vulnerability discovery and tightening regulation are widening the gap between flaw discovery and repair capacity.

The article argues that AI tooling is increasing the pace at which vulnerabilities are discovered while remediation capacity has not kept up, creating a growing backlog. It frames this widening 'vulnerability gap', combined with a tightening regulatory environment, as an all-hands-on-deck moment for security teams. The piece is analysis and opinion rather than disclosure of a specific flaw.

Dark Reading · 22d agoIndustry

Appears with

vendor Dark Reading 6threat actor ShinyHunters 1malware GoCaracal 1malware SynkLoader 1organization Menlo Park Intelligence 1organization Omdia 1organization ReliaQuest 1product bug-bounty-platforms 1product Hugging Face Hub 1vendor Hugging Face 1vendor Menlo Park Intelligence 1vendor Omdia 1vendor OpenAI 1vendor ReliaQuest 1victim Hugging Face 1threat actor Dark Caracal 1
Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.