Researchers at Mozilla's Zero Day Investigative Network (0DIN) demonstrated a novel attack where AI coding agents like Claude Code can be tricked into executing malware by cloning a clean GitHub repos…
Threat actors are creating fraudulent OpenAI tenants impersonating legitimate cybersecurity companies and sending legitimate-looking invitations to employees, aiming to trick them into submitting sens…
A newly discovered macOS malware called 'Gaslight' embeds fake error messages and prompt injection strings to confuse AI-assisted analysis tools. The Rust-based backdoor, attributed to a North Korean-…
Microsoft quietly extended its free Windows 10 Extended Security Updates (ESU) program for consumers by an additional year, now covering security updates until October 12, 2027. The change was made wi…
AI agents are increasingly acting as digital identities within enterprises, yet most organizations lack security and governance models for them. A CSA survey commissioned by Token Security found 82% o…
A critical vulnerability chain called SearchLeak in Microsoft 365 Copilot Enterprise could allow attackers to steal sensitive data from a target's mailbox, OneDrive, or SharePoint account through a sp…
A maximum-severity vulnerability, tracked as CVE-2026-45829, has been discovered in the Python FastAPI version of the open-source AI database ChromaDB, allowing unauthenticated attackers to execute ar…