Financial institutions are putting their clients at risk in the name of convenience.

Attested TLS: the handshake that can't prove who's on the other end

Third-party contractor compromise exposed health information and insurance billing passwords

Other residential proxy brands may rely on the same network

Maybe they were looking for Private Data

Left hand, meet right hand

MeetingTV wants to see the evidence

Don't count on the LLM to return your data - even if you pay up

Researchers scoured logs, finding opsec fail for at least one person who was working with INC and Lynx simultaneously

Attackers need little more than a valid SharePoint account to execute code on vulnerable on-prem servers

Company that also makes insulin pumps and other devices tells users what was exposed months after ShinyHunters attack

Government of the messenger's largest market demands a pause while Meta explains how it plans to stop impersonators

Attackers appear to have reverse-engineered Big Red's patch

Fortunately, they were professional red teamers. Unfortunately, they pwned the network

It's a 'complete BEC operations environment,' Talos researcher says

Safer, cheaper, and nothing to do with cybersecurity

'The original incomplete DeepSeek sample can be transformed into a fully functional attack with minimal effort,' Check Point researcher tells The Reg

People trust their AI assistants and it's easy to abuse this trust

29% of security pros were open to fully autonomous pentesting last year; now only 9% are

Ex-employee claims this 'meets the definition of an insider threat'

Allows ISVs to put their names on the door so desirable bots always get in

Open API could reveal everything an attacker needs to impersonate bank officials

If you want a picture of the future of LLM security, imagine Whac-a-Mole meets Groundhog Day

Not today, Putin

At least two vulnerabilities are already under attack

You don't need Mythos or GPT-5.5-Cyber to find a vuln to exploit when the world's password habits are so sloppy

In the Azure Edition, of course

Carmaker points finger at an 'unknown' flaw as customer fallout continues

Time to start praying to the goddess of wisdom and war

Personal cell phones on protective missions, no threat detection on government-issued devices among the litany of sins

Researchers warn many AI coding assistants now execute commands from project configurations

Microsoft says latest attack targets Leo Platform and RStreams packages, harvesting creds and going after more maintainers

One rule for the workers, another for execs

Qihoo 360, which the US has banned, says its needed as a deterrent to weaponized Anthropic models

Spotted in intrusions targeting insurance, education, IT, and professional services sectors

Former employee accuses company of prioritizing pending IPO over client security

And the admin password was right in the Active Directory description field

To defuse another attack, Oz spies called foreign counterparts to tell them an op was a bust

CVE-2026-20230 under exploitation, while an earlier SD-WAN 0-day looks even worse than we thought

200+ C2 servers linked to StealC and Amadey shut down