Blog

Google Chrome 152 delivers 327 security fixes, including 10 critical memory-safety bugs largely found with internal AI tooling, raising stakes for rapid patching.

Norway's shared government digital infrastructure has been hit by a multi-day DDoS campaign, disrupting ID-porten and other key public services nationwide.

CISA says internet-exposed PLCs at US water and wastewater utilities were probed in July cyberattacks and urges operators to pull critical OT off the web.

OpenAI has banned Russia-linked ChatGPT accounts that used AI to promote a fake think tank and run a covert influence campaign across major social platforms.

Colorado man faces federal charges after allegedly impersonating Supreme Court Chief Justice John Roberts and the head of NSA's TAO hacking unit.

A rare CISA red-team report finds a US water utility detected and contained a simulated phishing breach, while a government organization missed it entirely.

Attackers are hiding the 169.254.169.254 cloud metadata IP behind crafted hostnames, slipping past naive SSRF filters and exposing high-value credentials.

Oasis Security uncovered a NemoClaw flaw that lets a malicious webpage seize a developer's local Ollama model, plant hidden prompts and poison AI agents.

Interpol’s eight-month Operation Jackal IV led to 58 arrests, exposed €143M investment scams and hit Black Axe-linked fraud and sextortion networks worldwide.

Mirage2FA phishing-as-a-service is hijacking Microsoft 365 sessions at over 4,500 mostly US organizations, bypassing MFA with adversary-in-the-middle tactics.