Attackers are starting to exploit AI systems to mount attacks in the same way they once relied on built-in enterprise tools such as PowerShell. Instead of relying on malware, cybercriminals are increasingly abusing AI tools enterprises depend on — a trend…
A decent data removal platform, but more improvements could be made. On the bright side, Malwarebytes is an advanced cybersecurity suite with valuable features beyond data removal. No manual deletion requests These data broker sites pose privacy risks, but there’s…
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root…
Security researchers at Enclave have detailed a flaw in Microsoft Authenticator for Android, tracked as CVE-2026-80097. It let an app with zero permissions pose as an installed Microsoft app, such as Teams, and collect that app’s work-account tokens. Microsoft’s September…
You can encrypt an email in Outlook to protect confidential information beyond the connection between email providers. With a qualifying Microsoft 365 subscription, you can send an encrypted email or apply restrictions that stop recipients from forwarding it. The setting you…
Businesses contend with a combination of issues spawned by data overload, privacy regulations, access rights, cyberattacks, cloud environments, generative AI and human error. Everyone rightly focuses on the regulated data, including personal, card holder and healthcare information. But there's a…
The research was published on October 26, 2026. The attackers often contacted several victims within a short window, which the researchers read as automation. Arctic Wolf did not identify the operators, but noted that external Teams chat as an initial access route…
Business email compromise usually starts with something a defender can see: a phishing page, a malicious attachment, a suspicious sign-in from an unusual country. The campaign Huntress described on October 22, 2026 has none of those leading indicators. The attackers stole session…
Link inspection assumes a URL has one answer. Either it serves a credential page or it does not. A platform that serves a benign article to a scanner and a fake login page to a target breaks that assumption, and…
Main bombing sis getting a new look with a wide-scale, ongoing social engineering campaign that might be tied to the Black Basta ransomware gang. Threat actors are abusing Microsoft Teams' external chat functionality at scale, using IT-support impersonation and email…
Antivirus, VPNs, password managers, 2FA, firewalls, patch news, and privacy protection.
An article joins this feed when it matches these terms. Each one is also a search of its own.