Material Security says phishing invites from compromised Google Calendar accounts stole live Google sessions. Familiar-looking messages used trusted redirects and a proxy of Google’s real sign-in page ...

SemiAnalysis introduced GDPx, a benchmark covering eleven fields, including cybersecurity, chip design, biology, and software engineering. It worked with fourteen specialist partners to build tasks in ...

Data of homeland security workers leaked, Northflank warns of security breach, Russian home goods chain Poryadok suffers ...

Supply chain solution company JFrog found the testmetest npm worm had armed 42 GitHub repositories from 11 owners, despite initially appearing limited to test accounts. Roughly 13-megabyte payloads ...

Anthropic says new defenses cut the Claude reasoning data harvested by model copycats by roughly 90 to 99% on its platform. Distillation attacks train competing models through mass requests, often ...

Lumen’s Black Lotus Labs found malware called PoeLLM that’s compromised more than 3,400 servers since April, targeting services including LiteLLM, Ollama, Gotenberg, and Gitea. Its command-and-control ...

Proofpoint researchers found China-aligned group TA419 impersonating US policymakers to steal cloud credentials from AI policy experts at think tanks, universities, and law firms. In July, attackers ...

PwC’s 2027 Global Digital Trust Insights report is out, and among the almost 4,000 businesses surveyed, the fear of attacks targeting their own AI systems ranks as the top cyber threat they are “least ...

Google unveiled Gemini 4 Argon with access starting among a small group of trusted cybersecurity defenders. Google says Argon can handle complex, long-running work in coding, finance, legal tasks, and ...

Libsyn Podcast Player Companies keep insisting their AI agents are ready for business, yet insurers won’t write a policy to back that claim up. If the risk is real enough to be uninsurable, why do we ...

Most disaster recovery plans treat Microsoft 365 like a single system you can back up and restore. That framing misses the point , since a compromised tenant is really about identity, trust, and ...

Fortinet patched ten product vulnerabilities, including two critical flaws that don’t require authentication. One lets an attacker forge or reuse a JSON Web Token to bypass the FortiMonitorOnSight web ...