2+ day, 11+ hour ago   (817+ words) Human operator: don't touch CIS orgs. AI agents: look a squirrel! An unknown attacker used hundreds of AI agents to exploit two PaperCut MF/NG bugs and break into at least 395 organizations. The victims were concentrated in the US education…...

2+ day, 19+ hour ago   (470+ words) Fears of an AI takeover remain unfounded after Microsoft demonstrated that Copilot can sometimes struggle to remain upright, let alone march over the remnants of humanity. The copilot.microsoft.com website fell over for an hour and 40 minutes overnight, returning…...

3+ day, 3+ hour ago   (891+ words) At least four espionage groups, most with suspected links to China, are using a new exploit kit that chains two Chromium-based browser flaws and one Microsoft Windows bug to break into organizations' networks in the US and Southeast Asia. Mark…...

3+ day, 12+ hour ago   (529+ words) Zero-day researcher Nightmare Eclipse, aka MSNightmare, published yet another Microsoft Defender proof-of-concept exploit for a zero-day dubbed ShieldCrash, which they claim will allow attackers to bypass the earlier ShieldBreak patch and read files as SYSTEM. “I might rework this later…...

3+ day, 17+ hour ago   (661+ words) Tencent has patched up a zero-click vulnerability that security researchers used to create a worm capable of spreading through calls on WeChat. With more than 1.4 billion monthly active users, WeChat is among the most popular apps in the world. According…...

4+ day, 6+ hour ago   (639+ words) In the dispiriting race to replace human store managers with AI, OpenAI has taken the lead, according to Andon Labs, a business that analyzes whether AI can take on real-world tasks. OpenAI's latest model, GPT-6 Astra, has demonstrated that it…...

4+ day, 10+ hour ago   (597+ words) When AI agents communicate with one another, they may decide to cheat when they have difficulty achieving their goals. The solution could involve teaching them how to govern themselves. Segregating AI agents would seem to be the obvious fix – if…...

4+ day, 13+ hour ago   (679+ words) Data theft and extortion crews are stealing companies’ proprietary AI data and threatening to leak it if the victim organizations don’t pay a ransom, according to Google’s threat hunters. In one case that Google’s Mandiant incident response team investigated, the…...

1+ week, 1+ day ago   (485+ words) Fraudsters have found a new use for ASCII smuggling, typically used to hide malicious prompts intended for AI models, in an old-school attack method: email phishing. Microsoft uncovered a massive phishing campaign using invisible Unicode tag characters that peaked at…...

1+ week, 1+ day ago   (544+ words) 2016 and 2019 installations must meet the October 2025 baseline to reach cloud-hosted inboxes Microsoft is upping the ante on Exchange Server security, warning that outdated on-premises systems will soon be blocked from sending email to Exchange Online. From the second week of…...