Ravie LakshmananJul 13, 2026Cybersecurity / Hacking Somewhere right now, a security tool is quietly finding bugs faster than any human […]
Category: Security
‘Cryptomining can be a lucrative post-compromise activity in cloud environments’: Experts warn AI gateways connected to Amazon Bedrock are being hijacked to steal crypto
(Image credit: Getty Images) Darktrace reports cryptojacking via a compromised AI gateway (LiteLLM‑Proxy on AWS Bedrock), breached through exposed SSH […]
New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email
Give an AI assistant a memory and access to your inbox, and you hand an attacker a way to rewrite […]
Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft
A new phishing-as-a-service (PhaaS) operation called Forg365 is using a combination of device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion, […]
Meta Files Patent for AI That Can Listen All Day and Track How You’re Feeling
Meta has filed a patent application for an AI that listens to your voice throughout the day, works out how […]
Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots
A few days ago, I was sitting with the CISO of a Fortune 50 company, walking through how his security […]
Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory
Cybersecurity researchers have flagged an intrusion in which an unknown threat actor leveraged a vibe-coded PowerShell script for Active Directory […]
Lidl customers across Europe hit in suspected data breach – here’s what we know
(Image credit: Getty Images) Lidl confirms cyberattack at third-party IT service provider that exposed customer data including names, phone numbers, […]
Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365
An attacker running a live Microsoft 365 phishing operation left a Python web server listening on a public port with […]
iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days
Ravie LakshmananJul 13, 2026Vulnerability / Web Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity security […]