Microsoft makes Windows SSO prompts easier to manage

Microsoft is introducing a new registry-based policy that lets IT administrators automatically accept Windows SSO permissions on Windows 11 versions 24H2 and 25H2 devices managed with Microsoft Entra ID. Users with personal Microsoft accounts and devic… Continue reading Microsoft makes Windows SSO prompts easier to manage

VS Code agent host runs Copilot, Claude, and Codex in a dedicated process

Developers who lean on AI coding agents often keep several editor windows open at once, each tied to its own session. The 1.129 release of Visual Studio Code reworks that setup with a dedicated agent host. A dedicated process for agent sessions The age… Continue reading VS Code agent host runs Copilot, Claude, and Codex in a dedicated process

Finance phishing works because it sounds boringly normal

Finance departments process a constant stream of invoices, contracts, payment notices, and procurement emails, making email one of the most common initial access vectors for threat actors. According to Cofense, attackers exploit those workflows with ph… Continue reading Finance phishing works because it sounds boringly normal

AWS retools Security Hub for AI and multicloud threats

AWS added AI workload protection and Microsoft Azure security monitoring to Security Hub, its centralized security platform for collecting and prioritizing security findings across cloud environments. Support for additional cloud platforms will follow…. Continue reading AWS retools Security Hub for AI and multicloud threats

Product showcase: Trust Chain TPRM turns vendor compliance evidence into verified assurance

Trust Chain is an AI-native third-party risk management (TPRM) solution by Strike Graph that replaces the security questionnaire model with validated evidence of compliance. Rather than asking vendors to self-report their security posture, Trust Chain … Continue reading Product showcase: Trust Chain TPRM turns vendor compliance evidence into verified assurance

SingGuard-NSFA: Open-source guardrails for agentic AI

SingGuard-NSFA is an open-source guardrail framework aimed at operational threats in agent workflows. Four models ship at 0.8B, 2B, 4B, and 9B parameters, all built on Qwen3.5 base backbones. Risk taxonomy The NSFA risk taxonomy organizes threats along… Continue reading SingGuard-NSFA: Open-source guardrails for agentic AI

An AI overthinking attack can tie a robot up for over a minute

Robots that read the world through cameras now lean on large vision-language models to interpret what they see and decide what to do next. These models handle images and text together, so any words that fall inside the camera frame become part of the i… Continue reading An AI overthinking attack can tie a robot up for over a minute

AI used to help plan the break-in, now it’s doing the break-in

Over the past twelve months, researchers documented intrusions in which AI ran exploitation workflows autonomously, generating thousands of commands across dozens of sessions with minimal human direction, according to Check Point’s AI Security Report 2… Continue reading AI used to help plan the break-in, now it’s doing the break-in