A critical flaw discovered in the Opera GX browser could enable malicious websites to automatically install a customization mod and use it to steal data from other sites a victim visited, with no user interaction required. GX Mods allow Opera GX… Read More "Opera GX Flaw Let Sites Auto-Install Mods to Steal Data"
North Korean hackers are targeting open source software developers with a backdoor and an information stealer as part of a broad supply chain campaign, Socket reports. Referred to as PolinRider, the campaign has been ongoing since December 2025, using compromised… Read More "North Korean Hackers Target Open Source Developers in Supply Chain Attacks "
The first half of 2026 has given security teams little room to breathe. Ransomware operators kept up a punishing pace. If that wasn’t enough, access brokers turned network intrusions into a marketplace, and nation-state activity blurred further into hacktivism and organized cybercrime. Taken… Read More "2026 Threat Intelligence Trends, Cyber & Ransomware Report"
A streaming box should not need a threat model. Neither should a username field, a demo repo, a reset flow, or a browser permission prompt. That is the irritating part this week: the risky pieces were ordinary. Home devices became… Read More "Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More"
The reality is that we don’t yet fully trust AI with our most critical security concerns, and for good reason. Few people would dispute that there are serious production risks in relying on AI and most wouldn’t actually use it… Read More "AI isn’t closing the skills gap — it’s exposing the validation gap"
Security teams using Amazon Web Services (AWS) infrastructure now have access to a new Amazon-made platform to manage the whole lifecycle of code vulnerabilities from discovery to remediation. The Seattle-based tech giant launched AWS Continuum among a wave of announcements… Read More "AWS Unveils A New AI‑Powered Vulnerability Management Platform"
Meta is testing face-recognition software built by Rank One, a company that supplies the US military and regional police departments, WIRED found in an investigation this week. Meta has been exploring the possibility of adding face-recognition tech to its smart… Read More "Hackers Claim to Leak Stolen Madison Square Garden Data"
Threat actors are using prompt injection attacks embedded in malicious websites and manipulated search results to trick AI agents into making payments or trusting fraudulent cryptocurrency platforms. Zscaler says it identified two campaigns relying on indirect prompt injection, including a… Read More "Prompt Injection Attacks Trick AI Agents Into Making Crypto Payments"
Researchers found a flaw in Opera GX, the gaming-focused version of the Opera browser, that let a malicious website silently install a browser add-on and use it to lift specific data from the pages a victim visits. In a proof of… Read More "Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages"
Adaptive decision making is the biggest concern, he said. “Traditional detections assume attackers follow fairly predictable paths. An AI agent can quickly change tactics if something is blocked, making every intrusion look slightly different. I’m less worried about the encryption… Read More "This AI agent autonomously hacked a network, adapted on the fly, and demanded a ransom"
