… The scale of unauthorized AI usage in enterprise environments is one of the report’s most significant findings: 67% of users are accessing AI services on corporate devices through personal, non-corporate accounts, and 45% of employees are now considered regular AI users. …
… Google will be expanding protections against scammers spoofing caller IDs to impersonate financial institutions and trick users into transferring money or revealing account-related information. …
… Download Now Related Articles: Ukraine identifies infostealer operator tied to 28,000 stolen accounts Russian hackers turn Kazuar backdoor into modular P2P botnet Fake OpenAI repository on Hugging Face pushes infostealer malware Fake Claude AI website delivers new 'Beagle' Windows malware Hackers a… …
… Download Now Related Articles: Bitwarden CLI npm package compromised to steal developer credentials New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud attack ships signed malicious TanStack, Mistral npm packages TeamPCP hackers advertise Mistral AI code repos for sale OpenAI confir… …
… Another worm module abuses Microsoft Outlook through COM automation, launching the app, harvesting contacts and sender addresses, and sending phishing emails through the victim’s email account. …
… Download Now Related Articles: Avada Builder WordPress plugin flaws allow site credential theft TikTok for Business accounts targeted in new phishing campaign cPanel, WHM emergency update fixes critical auth bypass bug New Bluekit phishing service includes an AI assistant, 40 templates New VENOM ph… …
… The researchers said that the campaigns primarily targeted Microsoft 365 environments using phishing emails that directed victims to Microsoft's device code login portal, where they unknowingly authorized attackers to access their accounts. …
… The Mini Shai-Hulud malware delivered in the campaign targeted the theft of developer and cloud credentials, including GitHub tokens, npm publish tokens, AWS credentials, Kubernetes secrets, SSH keys, and .env files. …
… Push's own telemetry shows the average organization has 16 unique AI apps, 17 AI browser extensions, and 17 AI-connected OAuth integrations — most of them unapproved. Of file uploads to AI tools, 38% are made from personal shadow accounts rather than organizational ones. …
… According to TanStack's post-mortem report from TanStack, the attackers chained three vulnerabilities: a risky ‘pull request-target’ workflow, GitHub Actions cache poisoning, and OIDC token theft from runner memory. …
To show you the most relevant results, we’ve omitted some entries very similar to those already shown. Repeat the search with the omitted results included.