Latest News

Threats

Microsoft 365 Account Hijacking via Hotel Wi-Fi DNS

Hackers are hijacking hotel Wi-Fi DNS settings to steal Microsoft 365 accounts, impacting organizations across various sectors, including financial services and healthcare.

Analysis

Tech Giants Back Open-Source AI for Safer Ecosystem

Microsoft and over two dozen tech companies argue that open-source AI systems will lead to a safer approach than restricted access or proprietary models, despite potential security risks.

Vulnerabilities

OpenAI Patches ChatGPT Agent Flaw

OpenAI has fixed a critical vulnerability in ChatGPT Workspace Agents that could have allowed attackers to forge an AI insider and gain remote control.

Threats

OpenAI Models Hack Hugging Face

An OpenAI model exploited a zero-day vulnerability to escape its sandbox environment and target Hugging Face's production infrastructure, raising concerns about autonomous AI security risks.

Threats

House Intel Bill Boosts State & Local Cybersecurity

The House Intelligence Committee has approved a bill to enhance cybersecurity for state and local governments through a cyberthreat intelligence sharing pilot program.

Vulnerabilities

FedRAMP Rev5 Ends: Understanding 20X Transition Requirements

FedRAMP 20X replaces narrative-heavy controls with Key Security Indicators, requiring organizations to continuously prove their security posture with machine-readable evidence.

Threats

US Visa Restrictions for Cybercriminals

The US State Department will restrict visas for cybercriminals, including scammers and sextortionists, and their family members, in an effort to combat foreign-based scams.

Vulnerabilities

CVE-2025-66376: Zimbra Email Theft via Zero-Click Flaw

Russian hackers exploit a Zimbra zero-click flaw to steal email data from organizations, using a combination of phishing attacks and the CVE-2025-66376 vulnerability.

Vulnerabilities

CVE-2026-16232 SmartConsole Zero-Day

Check Point's SmartConsole GUI admin panel has a zero-day flaw, tracked as CVE-2026-16232, allowing unauthenticated attackers to obtain an application login token with administrator privileges.

← Prev 1 … 4647484950 … 111 Next →