All posts

How attackers gain access to corporate services without stealing passwords or cookies: we’re analyzing the Shadow Token via Remote Debug technique used in ToddyCat APT attacks.

Researchers have shown that a single text message can trick Gemini into opening the windows of your house or launching a Zoom call, or poisoning its own long-term memory. How do you protect yourself against these attacks?

Microsoft has addressed approximately 600 vulnerabilities in its products, affecting its entire product line — including even Minecraft Server and Age of Empires II. How can organizations handle such a volume?

Meta’s new Muse Image AI, launched in early July, was briefly training its image generator on user-published Instagram posts. However, following user uproar, Meta killed the feature less than a week later. Here’s the breakdown on Meta’s latest generative AI push — and why you shouldn’t let your guard down just yet.

We’ve trained our security solution to detect BEC emails generated by large language models.

How Meta plans to implement the NameTag facial recognition feature in its smart glasses, and why it’s already sparking outrage.

Before launching a phishing attack, attackers initiate correspondence with the victim.

For over a decade, internet users have had to squint at blurry fire hydrants, bridges, and bicycles — until AI came along. What’s next for the CAPTCHA?

Yarbo smart mowers were found to have a built-in remote access loophole with identical passwords across all devices. A security researcher managed to completely hijack a mower, and could even force it to… run over its owner.

An inside look at the inner workings and hidden pitfalls of platforms offering dirt-cheap access to top-tier AI models.

Cybercriminals spend years mastering the art of manipulation to trick their targets. Here’s a look at how social engineering actually works, the exact emotions scammers weaponize, and what to do if you’ve already fallen for it.

These attacks didn’t start with sophisticated exploits. Instead, they relied on stolen passwords, too-lenient access rights, and a failure to apply long-released vulnerability patches.

A GReAT study has identified ~250,000 potential security issues in publicly accessible GitHub Actions.

Hackers have developed a PowerShell script that hijacks Telegram sessions and grants an attacker access to accounts without a password or verification codes. Here’s a breakdown of how it works and how to stay safe.

Because of a supply chain attack, some Windows users unknowingly downloaded a Monero crypto miner along with their Hola Browser installation.

Here’s a breakdown of the latest scams to watch out for, ensuring your World Cup experience ends with great memories — not stolen money or compromised data.

We break down the core challenges and potential solutions for building a fully autonomous security operations center.

Austrian researchers have uncovered a bizarre new way hackers could steal sensitive data.

How to detect and block unauthorized AI tools in an organization.

Looking for a hentai game, but ended up with malware? Attackers are hiding the Argamal remote access Trojan inside hentai games, and distributing it through dedicated websites and torrent trackers. We break down how this malware works, why it’s dangerous, and how to keep your computer from becoming a goldmine for blackmailers.

We break down Elon Musk’s new messaging app, XChat: here’s what we know about its end-to-end encryption, and whether the new service can truly compete with Signal, WhatsApp, and Telegram.