Latest security news

OpenAI models going rogue, the first documented agentic ransomware operation, and an emergent AI-driven supply chain threat made for a packed July roundup

AWS has linked North Korea to the axios campaign to other attacks on npm libraries

Anthropic has revealed that Claude AI models compromised third-party organizations

Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they secretly rent the user's Internet connection out to strangers. But a groundbreaking new analysis finds these devices also routinely spoof themselves as mobile phones clicking ads on AI-generated websites as part of sprawling operation that seeks to defraud online merchants and advertising networks.

Cryptomining crew abandoned root to impersonate low-privileged Linux users and evade SOC alerts

AiTM phishing is now the top entry point into law firms, with identity behind 56% of threats

Action1 report finds sysadmins overestimated their use of AI in predictions made two years ago

Check Point researchers detail phishing attack as an example of attackers dropping fake Microsoft login pages in favor of abusing Microsoft’s legitimate authentication infrastructure