2+ day, 15+ hour ago   (707+ words) Hackers are using passkey-themed phishing to take control of Microsoft 365 accounts and collect cloud data. It can defeat MFA protections. The campaign starts with calls and texts to employees. Attackers pose as IT support, claim a passkey, MFA, or single…...

2+ day, 15+ hour ago   (515+ words) Enterprise AI workflows can be vulnerable to misuse that exposes sensitive information without prompt injection, account compromise, or jailbreaking a large language model. Workflows linked to public-facing email inboxes, web forms, GitHub issues, shared documents, customer support systems, and chat…...

2+ day, 14+ hour ago   (592+ words) WordPress has rolled out an automated, AI-driven security review that screens every plugin release before it reaches the WordPress.org update API, adding a critical checkpoint to a distribution pipeline that had previously lacked one. The move follows a real-world…...

2+ day, 14+ hour ago   (630+ words) A new phishing campaign is moving fake login pages into victims’ browsers. Rather than sending people to a malicious website, its operators use browser-generated blob URLs to assemble the page in local memory, leaving less for security tools to inspect…...

2+ day, 18+ hour ago   (391+ words) The company says traditional defenses may no longer be sufficient as long-running AI agents can chain exploits and scale attacks using increasingly available open-weight models. Modern AI agents can operate for extended periods, retain knowledge across sessions, and build a…...

2+ day, 18+ hour ago   (629+ words) Mac users seeking AI tools face a malware trap. Attackers are using fake Claude and ChatGPT installers and sponsored search results to push MacSync, a macOS password stealer. The campaign relies on persuasion instead of a software flaw. A visitor…...

2+ day, 16+ hour ago   (588+ words) LiteLLM deployments can expose far more than an organization’s AI spending. Newly disclosed weaknesses in the open-source gateway could let attackers run code as root inside a container, reach connected tools, and retrieve cloud credentials that open a path into…...

2+ day, 20+ hour ago   (647+ words) Hackers have used commercial AI models to help break into government, transport and financial networks across Latin America. The activity shows how chat-based tools can speed up familiar intrusion work, from fixing faulty scripts to moving stolen information out of…...

2+ day, 19+ hour ago   (1415+ words) Bottom line up front: the encryption engines are largely solved BitLocker and FileVault are strong, free, and built in. What you’re actually buying in 2026 is management: proof for auditors, key escrow and recovery, policy across mixed fleets, and pre-boot options…...

2+ day, 19+ hour ago   (1179+ words) Bottom line up front: no single product “stops ransomware.” Modern attacks are staged intrusions initial access, credential theft, lateral movement, exfiltration, then encryption and each stage has different controls. The list below is therefore organized by role in the kill…...