Please confirm you are human
This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.
A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.
News
Microsoft Begins to Merge Consumer and Enterprise Copilot Apps to Make New Super App
10+ hour, 57+ min ago (422+ words) Microsoft is moving closer to a unified Copilot experience by merging key elements of its consumer AI assistant with the Microsoft 365 productivity environment. The change positions Copilot as a single application for personal tasks, workplace productivity, files, collaboration, and AI-driven…...
McDonald's, Vodafone Hit by Azure Credential Theft Campaign Exposing Millions of Enterprise Records
12+ hour, 27+ min ago (477+ words) A sprawling Azure data exfiltration campaign is unfolding across the dark web, with a threat actor systematically selling off internal employee directories stolen from some of the world’s largest corporations. The seller, operating under the alias “TheHatman,” claims to have…...
Hackers Started to Exploit Critical SAP Commerce Cloud, Still No Public PoC
1+ day, 12+ hour ago (309+ words) Threat actors have begun actively probing and attempting to exploit a maximum-severity flaw in SAP Commerce Cloud, just three days after official security fixes were released. Defused honeypot telemetry captured the first wave of unauthenticated remote-execution traffic circulating across the…...
Post-Hugging Face Reflections: The Agentic Attacker Is Already Here
1+ day, 12+ hour ago (830+ words) Bill Robbins, CEO of Menlo Security An AI agent broke out of the sandbox built to contain it and put itself on the open internet. Then it attacked another company. The attack wasn’t executed by a human. Instead, the AI…...
Shell Investigating Data Breach Following Cl0p Ransomware Group Claim
1+ day, 13+ hour ago (267+ words) Security researchers and enterprise defenders are closely monitoring the situation as forensic teams work to assess the legitimacy and operational scope of the cyberattack. “We are working with our security teams and relevant experts to investigate the situation,” a Shell…...
Microsoft to Make Passkeys Default in Entra ID and Retires SMS and Voice Authentication
1+ day, 16+ hour ago (515+ words) Microsoft will make passkeys the default authentication experience in Microsoft Entra ID as part of a broader move away from phishing-prone sign-in methods. Beginning September 1, 2026, users currently enabled for SMS or voice authentication will be automatically enabled for passkeys. During…...
HACKERAI Malware Turns GitHub Gists Into a Command-and-Control Channel
2+ day, 16+ hour ago (704+ words) A newly identified malware framework called HACKERAI C2 Agent is using GitHub Gists as a hidden channel for attacker commands and stolen data. The technique lets operators blend malicious traffic with a service that many organizations allow on their networks. The…...
Bring Your Own EDR Attack Turns SentinelOne Into PPL-Protected Trojan Horse to Shield Malware
2+ day, 13+ hour ago (623+ words) A “Bring Your Own EDR” attack abuses trusted SentinelOne components to turn endpoint protection into a powerful malware shield. The research was presented at DEF CON 34 in Las Vegas, and SentinelOne fixed the reported issue in Agent version 26.1.1. Endpoint detection…...
DCRat Campaign Hides Malware Archive Inside SVG Using HTML Smuggling
2+ day, 14+ hour ago (615+ words) A new DCRat campaign is using a familiar image format to hide a dangerous malware archive. The operation begins with phishing emails that pose as legal notifications and urge recipients to open an attached SVG file. The attachment looks harmless…...
Multiple TP-Link Vulnerabilities Allow Attackers to Bypass Authentication and Escalate Privileges
2+ day, 13+ hour ago (455+ words) The flaws could allow attackers with network access to bypass authentication, escalate privileges, steal sensitive information, read device files, and execute operating system commands. The most serious flaw, CVE-2025-30237, is an authentication bypass vulnerability in the web management interface. It…...