Risk Management

Data Security Cyber Threats Data Protection Incident Response Supply Chain Security Cybersecurity Measures Security Protocols Data Breaches Compliance Security Audits

3 ARTICLES

4w ago

GitLost: Public Issue Can Make GitHub Agentic Workflows Leak Private Repo Data

A proof of concept published Tuesday shows how credentialed AI agents can be steered by normal-looking issue text, exposing a structural risk that needs scoped credentials and staged review.

6 ARTICLES

last mo.

Athena Coalition Launches To Fix AI-Found Open-Source Flaws Before Exploits

4 ARTICLES

last mo.

FortiBleed Leak Reveals Tens of Thousands of Compromised Fortinet VPN and Admin Logins

6 ARTICLES

last mo.

Malicious JetBrains Plugins Steal AI API Keys From Developers

8 ARTICLES

2mo ago

Dashlane Confirms Brute-Force Attack and Says Fewer Than 20 Encrypted Vaults Were Downloaded

3 ARTICLES

2mo ago

AI Cuts Vulnerability Exploit Windows to Hours, Forcing Shift From Patching to Runtime Defense

3 ARTICLES

2mo ago

Proton Adds Scoped AI Access Tokens to Pass

3 ARTICLES

2mo ago

Counterfeit Claude Code Installer Targets Developers With Browser Credential Theft

8 ARTICLES

3mo ago

Microsoft Details AiTM Phishing Wave That Hit 35,000 Users in Mid-April

3 ARTICLES

3mo ago

Western Agencies Warn China-Linked Hackers Are Hiding Behind Hijacked Home and Small-Business Devices

3 ARTICLES

3mo ago

Huntress Sinkholes $10 Update Domain Behind Signed Adware That Disabled Antivirus on About 25,000 PCs

3 ARTICLES

3mo ago

CPUID Hack Redirected CPU-Z, HWMonitor and PerfMonitor Downloads to STX RAT

6 ARTICLES

4mo ago

Trivy Supply-Chain Attack Poisons GitHub Action Tags to Steal CI/CD Secrets

10 ARTICLES

4mo ago

Salesforce Alerts Customers to Experience Cloud Scans After ShinyHunters Claims Data Thefts

5 ARTICLES

5mo ago

Public Google API Keys Found to Unlock Gemini as Google Rolls Out Blocks

3 ARTICLES

5mo ago

Microsoft 365 Copilot Bug Let AI Summarize Protected Emails as Microsoft Monitors Patch

7 ARTICLES

5mo ago

CISA Orders Federal Agencies to Replace Unsupported Edge Devices

9 ARTICLES

6mo ago

1Password Rolls Out Browser Pop-Up to Thwart Phishing on Mismatched Sites

9 ARTICLES

6mo ago

Fortinet Confirms FortiCloud SSO Bypass Hitting Fully Patched FortiGate Firewalls

5 ARTICLES

7mo ago

Malicious npm 'Lotusbail' Package Steals WhatsApp Data and Plants Persistent Backdoor

Risk Management

GitLost: Public Issue Can Make GitHub Agentic Workflows Leak Private Repo Data

Athena Coalition Launches To Fix AI-Found Open-Source Flaws Before Exploits

FortiBleed Leak Reveals Tens of Thousands of Compromised Fortinet VPN and Admin Logins

Malicious JetBrains Plugins Steal AI API Keys From Developers

Dashlane Confirms Brute-Force Attack and Says Fewer Than 20 Encrypted Vaults Were Downloaded

AI Cuts Vulnerability Exploit Windows to Hours, Forcing Shift From Patching to Runtime Defense

Proton Adds Scoped AI Access Tokens to Pass

Counterfeit Claude Code Installer Targets Developers With Browser Credential Theft

Microsoft Details AiTM Phishing Wave That Hit 35,000 Users in Mid-April

Western Agencies Warn China-Linked Hackers Are Hiding Behind Hijacked Home and Small-Business Devices

Never miss stories about

Risk Management

Huntress Sinkholes $10 Update Domain Behind Signed Adware That Disabled Antivirus on About 25,000 PCs

CPUID Hack Redirected CPU-Z, HWMonitor and PerfMonitor Downloads to STX RAT

Trivy Supply-Chain Attack Poisons GitHub Action Tags to Steal CI/CD Secrets

Salesforce Alerts Customers to Experience Cloud Scans After ShinyHunters Claims Data Thefts

Public Google API Keys Found to Unlock Gemini as Google Rolls Out Blocks

Microsoft 365 Copilot Bug Let AI Summarize Protected Emails as Microsoft Monitors Patch

CISA Orders Federal Agencies to Replace Unsupported Edge Devices

1Password Rolls Out Browser Pop-Up to Thwart Phishing on Mismatched Sites

Fortinet Confirms FortiCloud SSO Bypass Hitting Fully Patched FortiGate Firewalls

Malicious npm 'Lotusbail' Package Steals WhatsApp Data and Plants Persistent Backdoor

Never miss stories about

Risk Management