Cybersecurity, AI, etc.
Summary Researchers have detailed “EvilTokens,” a sophisticated AI-powered phishing-as-a-service (PhaaS) operation that abuses Microsoft’s legitimate OAuth 2.0 device-code authentication flow to steal Microsoft 365 tokens at industrial scale. The operation…
Summary Indian electronics and semiconductor manufacturer Tata Electronics has confirmed a cyberattack and data breach, with the “World Leaks” threat group claiming to have exfiltrated 630GB of sensitive data. Tata…
Summary A critical authentication bypass vulnerability in SimpleHelp (CVE-2026-48558), a popular remote monitoring and management (RMM) platform, is being actively exploited to deploy “Djinn Stealer” — a previously undocumented cross-platform…
Summary Attackers are actively exploiting CVE-2026-46817, a critical improper privilege management and authentication flaw in Oracle E-Business Suite’s Oracle Payments component. The vulnerability allows unauthenticated attackers with HTTP network access…
Summary Security firm Tenet Security has disclosed “agentjacking,” a novel attack class that enables threat actors to hijack AI coding agents — including Anthropic’s Claude Code and Cursor — by…
Summary CISA has confirmed that ransomware gangs are actively exploiting CVE-2026-33825, a high-severity privilege escalation vulnerability in Microsoft Defender dubbed “BlueHammer.” The flaw, which was initially leaked by a security…
Summary OpenAI has launched a limited preview of GPT-5.6 Sol, the flagship model in its new GPT-5.6 family alongside Terra and Luna variants. Currently restricted to trusted partners and the…
The SANS 2026 Detection Engineering Survey, conducted in partnership with Anvilogic, paints a sobering picture of the state of defensive security operations. Surveying 307 practitioners across more than 10 industries,…
Prediction market platform Polymarket has confirmed a frontend supply chain attack that resulted in approximately $3.1 million being stolen from eleven user wallets. The attack, which began around June 25,…
Anthropic has accused Chinese tech giant Alibaba of orchestrating the largest known model distillation attack against its Claude AI platform. In a letter sent to the U.S. Senate Banking Committee…