Collaborate Disseminate
Fortunately, they were professional red teamers. Unfortunately, they pwned the network Continue reading Hackers shoveled snow for company, were rewarded with network admin access
It’s a ‘complete BEC operations environment,’ Talos researcher says Continue reading EvilTokens device-code phishing kit totally more evil than we all thought
Safer, cheaper, and nothing to do with cybersecurity Continue reading Claude Sonnet 5.0 heads straight down the middle of the road to dodge controversy
‘The original incomplete DeepSeek sample can be transformed into a fully functional attack with minimal effort,’ Check Point researcher tells The Reg Continue reading Somebody told DeepSeek to build in-browser ransomware and it gleefully complied
People trust their AI assistants and it’s easy to abuse this trust Continue reading Red teamers turned Claude Desktop into a double agent to do their evil bidding
29% of security pros were open to fully autonomous pentesting last year; now only 9% are Continue reading Infosec professionals sour on automated pentesting tools
Ex-employee claims this ‘meets the definition of an insider threat’ Continue reading Huntress CEO says threat hunter used ‘poor judgment’ in alerting ransomware crim about law enforcement probe
Allows ISVs to put their names on the door so desirable bots always get in Continue reading Microsoft builds a bouncer to keep bots out of Teams meetings
Open API could reveal everything an attacker needs to impersonate bank officials Continue reading India’s central bank mandated use of .bank domains to enhance trust – but its registry leaked sensitive info
If you want a picture of the future of LLM security, imagine Whac-a-Mole meets Groundhog Day Continue reading Security researchers tricked LLMs into giving them cocaine recipes by abusing role models for prompt injection