Attackers exploit identity verification processes, particularly during onboarding and account recovery, to gain unauthorized access to corporate systems.
Red Hat removed dozens of packages from its software distribution pipeline after attackers used a compromised GitHub account to distribute credential-stealing malware to developers, affecting 32 packages downloaded roughly 117,000 times a week.
Multiple Instagram users had their accounts hijacked after attackers convinced Meta's AI-powered support tools that they were the legitimate owners, with many unable to recover access due to automated assistance loops.
Two new reports offer competing explanations for the growing cybersecurity crisis, with one suggesting a failure of tools and the other citing poor management of existing tools.
A threat actor is using an AI-built ransomware attack toolkit that automates Active Directory discovery and evades endpoint detection and response solutions.
President Donald Trump signed an executive order to vet national security risks of advanced AI systems before public release, with voluntary participation from AI developers.
The Trump administration issued a revised executive order on artificial intelligence, significantly weakening provisions that had been opposed by industry.
The browser has become the front line for AI security, with adversaries using AI to iterate on phishing kits and employees adopting AI tools without security oversight.
Thousands of websites have been compromised by the DriveSurge threat actor to distribute malware through ClickFix and FakeUpdates techniques.
Hackers used Meta's AI support bot to seize control of high-profile Instagram accounts, including those of the Obama White House and the Chief Master Sergeant of the U.S. Space Force.