News

How generative AI accelerates identity attacks against Active Directory

Active Directory is still how most organizations manage user identities, making it a frequent focus during attacks. What...
News

Are Copilot prompt injection flaws vulnerabilities or AI limits?

Microsoft has pushed back against claims that multiple prompt injection and sandbox-related issues raised by a security ...
News

Cloud file-sharing sites targeted for corporate data theft attacks

A threat actor known as Zestix has been offering to sell corporate data stolen from dozens of companies likely after bre...
News

ClickFix attack uses fake Windows BSOD screens to push malware

A new ClickFix social engineering campaign is targeting the hospitality sector in Europe, using fake Windows Blue Screen...
News

US broadband provider Brightspeed investigates breach claims

Brightspeed, one of the largest fiber broadband companies in the United States, is investigating security breach and dat...
News

VSCode IDE forks expose users to “recommended extension” attacks

Popular AI-powered integrated development environment solutions, such as Cursor, Windsurf, Google Antigravity, and Trae,...
News

Agentic AI Is an Identity Problem and CISOs Will Be Accountable for the Outcome

By Itamar Apelblat, CEO & Co-founder, Token Security If you are a CISO today, agentic AI probably feels familiar in an u...
News

Ledger customers impacted by third-party Global-e data breach

Ledger is informing some customers that their personal data has been exposed after hackers breached the systems of third...
News

NordVPN denies breach claims, says attackers have “dummy data”

NordVPN denied allegations that its internal Salesforce development servers were breached, saying that cybercriminals ob...
News

Hackers claim to hack Resecurity, firm says it was a honeypot

Update: Article updated to reflect that the ShinyHunters says they were not involved in this activity. We have updated o...