In a bold move to counter the growing number of open-source software supply chain attacks, Google has launched OSS Rebuild, a program designed to automatically rebuild OSS packages in isolatedRead More →
In a recent threat intelligence disclosure, Okta has identified the misuse of Vercel’s v0.dev, a generative AI-powered interface builder, by malicious actors to construct sophisticated phishing websites. These sites areRead More →
A new evasion technique called “TokenBreak” has been discovered that effectively bypasses AI-based content moderation systems—including those used in popular AI models, chatbots, and content filters. This method works byRead More →
The adoption of AI-powered coding platforms, such as OpenAI’s Codex, GitHub Copilot, Amazon CodeWhisperer, Google Gemini, Anthropic Claude, TabNine, Replit Ghostwriter, and Intellicode, promises transformative productivity gains. However, beneath theRead More →
The Windows operating system includes several pre-login accessibility features, intended to support users with disabilities. One of these components, utilman.exe (Utility Manager), is designed to launch accessibility tools like NarratorRead More →
Security researcher Nick Johnson (@nicksdjohnson) has revealed a highly sophisticated phishing attack that leverages two separate Google services — OAuth and Google Sites — to execute a multi-layered campaign capableRead More →
A sophisticated cyberespionage group known as Earth Preta (also called Mustang Panda) has been identified using advanced techniques to infiltrate systems and evade detection. Their stealthy approach involves leveraging legitimateRead More →
In a new cyber threat exploiting ZIP file concatenation, attackers use a Trojan embedded in concatenated ZIP files to target Windows users, evading standard detection methods. This technique takes advantageRead More →
In a recent report, Unit 42 cybersecurity researchers from Palo Alto Networks have uncovered a sophisticated method called “Deceptive Delight,” highlighting the vulnerabilities of Large Language Models (LLMs) to targetedRead More →
A recent investigation has uncovered a series of sophisticated cyber-attacks by the Advanced Persistent Threat (APT) group known as GoldenJackal, which successfully breached air-gapped government systems in Europe. These isolatedRead More →
