Blog

Researchers used Anthropic’s Claude to chain a forum exploit with an OpenAI SSO flaw, taking over employee accounts and reaching internal code before a rapid bug-bounty fix.

Microsoft has patched 18 vulnerabilities in Azure and Copilot AI services, mostly elevation-of-privilege bugs, with server-side fixes and no known exploitation.

Huntress details two Settra ransomware intrusions against retail and manufacturing firms, highlighting MeshAgent abuse, BYOVD tactics and defender takeaways.

US and Canadian authorities have seized NightmareStresser's domains, disrupting a long-running DDoS-for-hire platform tied to hundreds of thousands of attacks.

U.S. and Canadian authorities seized NightmareStresser DDoS-for-hire domains in an Operation PowerOFF push, disrupting attacks on schools, agencies and gamers.

Manhattan DA Alvin Bragg seized 12 AI porn sites hosting deepfake images of 1,200 victims, marking the largest celebrity deepfake takedown yet.

CISA has released detailed cyber decoy guidance to help critical infrastructure detect post-compromise activity, generate high-fidelity alerts and boost defenses.

Cisco has released patches for dozens of high‑severity flaws in FMC, ISE and Nexus Dashboard that enable command execution, auth bypass and RCE.

US, UK and Dutch agencies warn Iran's Chosen Brick Windows spyware, controlled via Telegram bots, is spying on dissidents, journalists, activists worldwide.

Hiscox’s 10th Cyber Readiness Report finds organizations now face average cyber incident losses of $52,000 and 32 hours of downtime, with small firms hit frequently.