Google brings instant email verification to Android, no OTP needed

Google has introduced cryptographically verified email credentials for Android through the Credential Manager API. This API aligns with the W3C Digital Credential API standard. It provides a unified way for apps to request and retrieve user credentials… Continue reading Google brings instant email verification to Android, no OTP needed

GopherWhisper APT group hides command and control traffic in Slack and Discord

Attackers continue to lean on everyday collaboration platforms to hide command and control traffic inside normal enterprise noise. A newly identified China-aligned APT group pushes that trend further, running its operations through Slack workspaces, Di… Continue reading GopherWhisper APT group hides command and control traffic in Slack and Discord

Phishing reclaims the top initial access spot, attackers experiment with AI tools

Phishing returned as the leading method attackers used to break into organizations in the first quarter of 2026, accounting for over a third of engagements where initial access could be determined, according to Cisco Talos. It is the first quarter phis… Continue reading Phishing reclaims the top initial access spot, attackers experiment with AI tools

PentAGI: Open-source autonomous AI penetration testing system

Penetration testers have long relied on collections of specialized tools, manual coordination, and documented runbooks to work through a target assessment. PentAGI, an open-source project from VXControl, attempts to automate that entire workflow using … Continue reading PentAGI: Open-source autonomous AI penetration testing system

Shadow AI, deepfakes, and supply chain compromise are rewriting the financial sector threat playbook

Financially motivated attacks continued to drive the bulk of cyber incidents against banks, insurers, and payment processors in 2025. Approximately 90% of breaches affecting financial institutions carried a financial motive, with data breaches accounti… Continue reading Shadow AI, deepfakes, and supply chain compromise are rewriting the financial sector threat playbook

Thunderbird 150 arrives with encrypted message search and OpenPGP improvements

Released today, Thunderbird 150.0 brings eight new features, a round of bug fixes, and security patches that cover the web engine underlying the email client. Thunderbird 150.0 runs on Windows 10 or later, macOS 10.15 or later, and Linux with GTK+ 3.14… Continue reading Thunderbird 150 arrives with encrypted message search and OpenPGP improvements

OpenAI’s Chronicle feature lets Codex read your screen, raising privacy concerns

OpenAI’s Chronicle is a feature designed to help Codex, an AI-powered coding assistant, better understand what users are working on by capturing context directly from their screens. It uses recent screen activity to build memories, allowing Codex to in… Continue reading OpenAI’s Chronicle feature lets Codex read your screen, raising privacy concerns