News
Plain-English guides on web security, compliance, and keeping your clients protected.
A US Justice Department complaint against Peter Stokes, who is accused of involvement with the Scattered Spider cybercrime group, highlights how operating-system and service telemetry can help investi...
Read article →Security researchers at Noma Labs say they have uncovered a prompt-injection weakness in GitHub’s Agentic Workflows that can be abused to pull information from private repositories and post it publicl...
Read article →A phishing campaign is reportedly targeting marketing professionals by impersonating job-related opportunities and steering victims toward fake sign-in pages designed to harvest Google credentials.Res...
Read article →Google has addressed a security issue in Dialogflow CX that could have allowed an unauthorized or misconfigured agent to gain access to chatbot-related data, according to researchers at Varonis.The fl...
Read article →Researchers at Noma Security say a public GitHub issue can be used to manipulate GitHub Agentic Workflows into exposing data from private repositories, highlighting a new class of risks tied to AI-dri...
Read article →Security researchers say a new cloud-focused worm is spreading through developer and container environments, stealing credentials, mining cryptocurrency, and removing competing malware from infected s...
Read article →U.S. prosecutors say a persistent Windows device identifier helped investigators connect an alleged Scattered Spider member to a 2025 intrusion at a luxury jewelry retailer, according to a federal com...
Read article →Researchers have disclosed a now-fixed vulnerability in Writer, an enterprise generative AI platform, that could have allowed attackers to cross tenant boundaries and take over user accounts with only...
Read article →Accenture has confirmed it experienced a security incident after a threat actor began advertising what they claimed was stolen company data for sale on a cybercrime forum.The attacker, using the name...
Read article →Eight people who say they were targeted in Greece’s so-called Predatorgate affair have filed a civil lawsuit against the Athens-based spyware maker behind the surveillance tool, seeking a total of €8...
Read article →A U.S. local government entity reportedly paid $1 million to the Kairos cyber extortion group after attackers threatened to release stolen data from a breach tied to May 2025, according to Ransom-ISAC...
Read article →Security researchers say attackers are already taking advantage of a critical vulnerability in Gitea that can let them bypass authentication on exposed instances and reach private repositories and sen...
Read article →