The majority (93%) of global organizations use or plan to use AI agents for security tasks such as password resets and VPN access despite the potential for serious breaches and data leaks, according to Semperis. The security vendor polled 1100… Read More "Most Organizations Use AI Agents for Sensitive Security Tasks"
Microsoft on Tuesday announced a new Teams admin policy aimed at providing organizations with increased visibility and control over external bots joining their meetings. With AI meeting tools becoming increasingly common, the lack of proper controls creates security and privacy… Read More "Microsoft Adds New Teams Controls to Block Unauthorized AI Bots From Meetings"
Ravie LakshmananJul 01, 2026Malware / SEO Poisoning Unknown threat actors are leveraging the ScreenConnect remote access tool as a way to deploy and execute AsyncRAT. Kaspersky said the activity is part of a “massive, multi-domain, multi-language” campaign that distributes malicious… Read More "SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT"
Does your chatbot know too much? Here’s why you should think twice before you tell your AI companion everything. 17 Nov 2025 • , 4 min. read In the movie “Her” the film’s hero strikes up an ultimately doomed romantic… Read More "What if your romantic AI chatbot can’t keep a secret?"
A new variant in the Dirty Frag family of Linux local privilege escalation flaws has surfaced, the third root-level Linux kernel bug disclosed in three weeks. According to new analysis from cloud security firm Wiz, the vulnerability, dubbed Fragnesia and… Read More "New Fragnesia Flaw Hands Linux Local Users Root Access"
Ravie LakshmananJul 01, 2026Artificial Intelligence / Vulnerability Adobe has released patches for multiple maximum-severity security flaws impacting Adobe ColdFusion and Adobe Campaign Classic. The ColdFusion updates “resolves critical and important vulnerabilities that could lead to arbitrary code execution, privilege escalation, arbitrary file… Read More "Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic"
ESET researchers provide insights into how PlushDaemon performs adversary-in-the-middle attacks using a previously undocumented network implant that we have named EdgeStepper, which redirects all DNS queries to an external, malicious hijacking node, effectively rerouting the traffic from legitimate infrastructure used… Read More "PlushDaemon compromises network devices for adversary-in-the-middle attacks"
Google is rolling out a new feature that will help investigate spyware attacks on Android devices. The new tool, called Android Intrusion Logging, was released on May 12 as part of Google’s Android Advanced Protection Mode (AAPM). This mode, which… Read More "Google Launches Android Spyware Forensics Tool for High-Risk Users"
Threat actors are compromising Microsoft 365 environments in a massive password spray campaign targeting the Azure CLI, cybersecurity firm Huntress warns. Between June 12 and 21, the company observed over 81 million login attempts against its customers, with 78 user… Read More "Massive Password Spray Campaign Targeting Azure CLI"
A Brazilian banking trojan called Ousaban is going after Windows users who bank in Spain and Portugal. Fortinet’s FortiGuard Labs identified the campaign in May 2026. It opens with a phishing PDF disguised as a corrupted file, checks that the visitor is… Read More "Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures"
