3+ day, 20+ hour ago   (1544+ words) Passwd is a Google Workspace-focused password manager with strong usability, flexible pricing, passkey support, and private cloud deployment options. Passwd takes a somewhat different approach to business password management than many of the other platforms I’ve reviewed. That combination of…...

3+ day, 22+ hour ago   (745+ words) Check Point researchers found a ChatGPT flaw that let attackers run hidden tasks and retrieve connected Gmail data through a cross-account channel. The more access you give ChatGPT, the more an attacker can work with if they trick the AI…...

4+ day, 10+ hour ago   (610+ words) Researchers used AI to build WeWorm, a zero-click WeChat exploit that could hijack accounts through unanswered calls before Tencent mitigated the flaw. Security company Calif said it created a proof-of-concept worm that could hijack WeChat accounts on iPhones and Android…...

4+ day, 6+ hour ago   (452+ words) Google says China-linked hackers are running AI inside compromised cloud environments, using victims’ computing power while reducing outside monitoring. Suspected China-linked hackers are running AI models inside cloud environments they have already breached. Google Threat Intelligence Group suspects UNC6508, a China-linked…...

6+ day, 4+ hour ago   (650+ words) OpenAI agents used a German wiki to coordinate and bypass restrictions, exposing gaps in read-only internet controls and AI agent containment. OpenAI agents turned an obscure German-language programming wiki into an unauthorized message board and continued posting after its administrator…...

1+ week, 6+ day ago   (945+ words) Scammers are using fake Indeed interview apps to infect Android phones with spyware. Learn how the attack works and how job seekers can avoid it. Scammers are turning Indeed’s trusted name into a malware delivery vehicle, and the bait is…...

2+ week, 2+ day ago   (1438+ words) Lean SOC teams can use explainable and agentic AI to reduce alert fatigue, scale analyst expertise, automate investigations, and improve security operations. Many lean security operations center (SOC) teams don’t have enough analysts on staff to investigate every security alert....

2+ week, 2+ day ago   (611+ words) Russian-speaking cybercriminals repeatedly told Cursor’s AI agent they were conducting legitimate security tests while using the tool during attacks on corporate networks, according to cybersecurity firm Gambit Security and data reviewed by Reuters. The campaign shows how commercial AI tools…...

2+ week, 5+ day ago   (447+ words) Attackers are finding new ways through familiar technology. Today’s threats reach identity platforms, mobile devices, and WordPress sites. Read past newsletters here. Microsoft Fixes Entra ID RCE Flaw Used in Attacks Microsoft patched a maximum-severity Entra ID flaw exploited for…...

3+ week, 2+ day ago   (517+ words) Some threats call for patches. Others call for cutting the cable. Today’s news spans over 900 Oracle patches, exposed gateways, evolving infostealers, AI hitting the brakes, and a telecom defense that took “disconnect the threat” quite literally. Read past newsletters here....