Once targeting just Microsoft 365, the phishing-as-a-service platform now aims at AWS, Okta, and Russian platforms, while relying on device code phishing.
Tag: platforms
AI, Cybersecurity, Global Security News
Election threats are focused on campaign systems, not voting machines
Cybersecurity threats to the 2026 midterm elections are targeting the accounts and platforms that campaigns, donors and voters use to communicate, according to a security report released Monday by Check Point Software Technologies. So far in this election cycle, threats are not aimed at voting machines or ballot-counting systems. Instead, threat actors are going after…
AI, Global Security News
DNS-AID lets AI agents find and verify each other through DNS
AI agents run across many platforms, and each one needs a way to locate and confirm the identity of the others it works with. The Linux Foundation’s DNS-AID project gives them that capability through the Domain Name System, the same address lookup system that has directed internet traffic for decades. The project lets AI agents…
Global Security News
Chinese Threat Actors Ditch Static Phishing Pages for Live Credential Interception
Almost all organizations impersonated by Chinese phishing platforms are non-Chinese entities, suggesting operators deliberately avoid domestic targets
AI, Global Security News
7 hard truths security pros should know: 2026 DevOps Threats Report
In 2025, trusted Git hosting platforms became a playground for cyber criminals. This is the main conclusion from the latest “DevOps Threat Unwrapped Report 2026” by GitProtect. If you want to effectively counter attacks targeted at your code (and business), you need security measures, good practices, and knowledge. Strengthen your organization’s security posture. Learn about…
AI, Global Security News, privacy
10 Top OSINT Tools Every Investigator Should Know in 2026
Modern OSINT platforms rely more on AI and automation, while older social tracking methods keep losing access due to privacy and API restrictions.
AI, Global Security News
Companies Have a New AI Problem: Too Many Agents
As it gets easier to create artificial-intelligence agents with platforms like Anthropic’s Claude Cowork , some businesses are dealing with ‘AI agent sprawl.’
AI, Exploits, Global Security News, malware
Patch Tuesday, May 2026 Edition
Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at finding security vulnerabilities in human-made computer code. That reality is on full display this month with some of the more widely-used software makers — including Apple, Google, Microsoft, Mozilla and Oracle — fixing near…
AI, Global Security News
Top Video Downloaders in 2026: Why Wondershare UniConverter Remains a Strong Choice
As video content continues to dominate entertainment, education, and social media platforms, more users are searching for reliable…
AI, Data Breaches, Endpoint, Global Security News, Network Security, Risk Management
Claude Code MCP Attack Enables Persistent Token Theft
AI coding assistants are becoming deeply integrated with enterprise SaaS platforms, but new research shows those connections may introduce hard-to-detect credential theft risks. Researchers demonstrated a MitM attack targeting Anthropic’s Claude Code that abuses MCP integrations to steal OAuth tokens and maintain persistent access to connected SaaS platforms and APIs. “AI agents used for code…
AI, Exploits, Global Security News, Risk Management
Apple needs to fix admin authentication in ABM
Apple’s platforms are secure by design, but when it comes to authentication, the company seems to be protecting employees more than it protects IT admins. It’s an attack vector just waiting to be exploited — if it hasn’t been already. As noted first by Six Colors, the problem is that administrator and People Manager accounts on Apple Business…
AI, Global Security News, privacy
Fake OpenAI Privacy Filter Repo Hits #1 on Hugging Face, Draws 244K Downloads
A malicious Hugging Face repository managed to take a spot in the platform’s trending list by impersonating OpenAI’s Privacy Filter open-weight model to deliver a Rust-based information stealer to Windows users. The project, named Open-OSS/privacy-filter, masqueraded as its legitimate counterpart, released by OpenAI late last month (openai/privacy-filter), including copying the entire
AI, Global Security News, malware, privacy
Fake OpenAI repository on Hugging Face pushes infostealer malware
A malicious Hugging Face repository that reached the platform’s trending list impersonated OpenAI’s “Privacy Filter” project to deliver information-stealing malware to Windows users. […]
AI, Global Security News
New TCLBanker malware self-spreads over WhatsApp and Outlook
A new trojan named TCLBanker, which targets 59 banking, fintech, and cryptocurrency platforms, uses a trojanized MSI installer for Logitech AI Prompt Builder to infect systems. […]
AI, Compliance, Cybersecurity, Global Security News, Risk Management
Bots in translation: Can AI really fix SIEM rule sprawl across vendors?
Enterprises migrating between SIEM platforms often have to manually rewrite detection rules because vendors such as Splunk, Microsoft Sentinel, IBM QRadar, and Google Chronicle use different query languages and data models. Researchers now say AI may be able to automate much of that work, though security experts remain divided over whether the problem really requires…
Cybersecurity, Global Security News
5 Best Anti-Piracy Video Hosting Platforms to Protect Premium Content
In this post, I will show you the 5 best anti-piracy video hosting platforms to protect premium content. Someone in a creator community recently posted: “I just found my entire 12-module course being resold on a Telegram channel for $5. I had 600 paying students.” The response thread went viral. Not because it was unusual.…
AI, Global Security News
SAS Continues AI Investment, Introduces Quantum AI Lab
During the SAS Innovate 2026 conference, the data and AI company introduced new platforms to manage next-generation innovation and investments in industry accelerators, as well as an update on its digital twin technology. Managing the supply chain: AI tailored to real-world use cases Among the announcements SAS made are continued investments in industry accelerators and…
Global Security News
U.S. Senators Vote to Ban Themselves From Trading on Prediction Markets
Lawmakers voted to ban themselves from trading on platforms including Kalshi and Polymarket following concerns over insider trading.
AI, Global Security News
Meta Reports Big Revenue Jump and Projected Spending Increase
Meta Platforms posted its biggest quarterly revenue jump in recent history in the first quarter but said it would spend even more money to build out AI data centers this year than forecast.
AI, Global Security News
New AI-Powered Bluekit Phishing Kit Targets Major Platforms with MFA Bypass Attacks
Bluekit Phishing Kit is a new PhaaS tool that targets major platforms, using AiTM techniques to steal session data and bypass MFA protections.
AI, Cybersecurity, Global Security News
From Mailbox to Revenue: Top 7 Direct Mail Platforms That Actually Deliver Results
In this post, I will show you the top 7 direct mail platforms that actually deliver results. Direct mail is no longer the slow, analog underdog of the marketing world. Today, the most forward-thinking brands are pairing physical mail with data intelligence, automation, and API-driven workflows to outperform purely digital campaigns. Whether you are a…
AI, Global Security News, Risk Management
Top AI-Powered Vendor Risk Management Platforms for SaaS Companies in 2026
Top AI-powered vendor risk platforms for SaaS companies in 2026, compare tools, features, and how to choose the…
AI, Data Breaches, Global Security News
ShinyHunters claims it stole 1.4 million records from Udemy
The ShinyHunters group claims it has breached the Udemy, one of the world’s largest online learning platforms. According to Have I Been Pwned, the leaked dataset contained 1.4 million unique email addresses of customers and instructors, along with names, physical addresses, phone numbers, employer information, and instructor payout methods, including PayPal, cheque, and bank transfer.…
AI, Global Security News
The AI criminal mastermind is already hiring on gig platforms
Labor-hire platforms let anyone with a credit card post a task and pay a stranger to complete it. The RentAHuman platform extends that model to AI agents through a Model Context Protocol server, allowing an agent to post gigs directly. Listed tasks include attending in-person meetings, photographing locations, delivering items, and surveying physical sites. A…
china, Global Security News, Government & Policy
GopherWhisper APT group hides command and control traffic in Slack and Discord
Attackers continue to lean on everyday collaboration platforms to hide command and control traffic inside normal enterprise noise. A newly identified China-aligned APT group pushes that trend further, running its operations through Slack workspaces, Discord servers, Outlook drafts, and the file.io sharing service. GopherWhisper toolset overview ESET researchers have named the group GopherWhisper and tied…
AI, Endpoint, Exploits, Global Security News, malware, Risk Management
Attackers abuse Microsoft Teams to impersonate the IT helpdesk in a new enterprise intrusion playbook
Attackers are increasingly exploiting enterprise collaboration platforms such as Microsoft Teams to gain initial access, impersonating IT helpdesk staff and persuading employees to grant remote control, according to new research from Microsoft. In a blog post, Microsoft described a “cross-tenant helpdesk impersonation” technique in which threat actors initiate conversations with employees via Teams’ external access…
AI, Global Security News, Risk Management
Legitify: Open-source scanner for security misconfigurations on GitHub and GitLab
Misconfigured source code management platforms remain a common entry point in software supply chain attacks, and organizations often lack visibility into which settings put them at risk. Legitify, an open-source tool from Legit Security, addresses that gap by scanning GitHub and GitLab environments and reporting policy violations across organizations, repositories, members, and CI/CD runner groups.…
AI, Apps, Compliance, Cybersecurity, Data Breaches, Endpoint, Exploits, Global Security News, malware, Network Security, Risk Management
When Trust Becomes a Weapon: Google Cloud Storage Phishing Deploying Remcos RAT
Modern phishing campaigns increasingly abuse legitimate services. Cloud platforms, file-sharing tools, trusted domains, and widely used SaaS applications are now part of the attacker’s toolkit. Instead of breaking trust, attackers borrow it. This shift creates a dangerous asymmetry. Security controls often whitelist or inherently trust these services, while users are far less likely to question them. The…
AI, Global Security News
29 million leaked secrets in 2025: Why AI agents credentials are out of control
AI agents need credentials to work. They authenticate with LLM platforms, connect to databases, call SaaS APIs, access cloud resources, and orchestrate across dozens of external services. Every integration point requires an identity. Most organizations are handling this badly, and the evidence is in the code. GitGuardian’s State of Secrets Sprawl Report found 28,649,024 new…
AI, Apps, Compliance, Global Security News, Network Security, Risk Management
Meta moves fast toward a world where AI builds the software
Meta Platforms is reportedly pulling top software engineers from across the company into a newly created AI unit on a mandatory basis, with the stated goal of eventually having autonomous agents perform the bulk of the work of building, testing, and shipping its products, and human engineers serving only to monitor them. The development was…
AI, Global Security News
ADLINK Unveils Next-Generation Edge AI Platforms Powered by NVIDIA Jetson Thor and NVIDIA IGX Thor to Accelerate Physical AI
ADLINK Technology Inc, a global leader in edge computing, announced its next-generation Edge AI platforms, the DLAP-IGX Series, featuring NVIDIA IGX T7000. ADLINK sees strong potential for the NVIDIA IGX Thor platform to drive the next generation of safe, high-performance AI at the edge—particularly in industrial robotics and the humanoid market. Compared with NVIDIA IGX…
AI, Global Security News
Phishers sneak through using GitHub and Jira’s own mail delivery infrastructure
Attackers are abusing the notification systems of SaaS platforms like GitHub and Jira to send phishing and spam emails, Cisco Talos researchers are warning. “Because the emails are dispatched from the platform’s own infrastructure, they satisfy all standard authentication requirements (SPF, DKIM, and DMARC), effectively neutralizing the primary gatekeepers of modern email security,” they note.…
AI, Global Security News
Google study finds LLMs are embedded at every stage of abuse detection
Online platforms are running large language models at every stage of LLM content moderation, from generating training data to auditing their own systems for bias. Researchers at Google mapped how this is happening across what the authors call the Abuse Detection Lifecycle, a four-stage framework covering labeling, detection, review and appeals, and auditing. Earlier moderation…
Cybersecurity, Global Security News
Choosing Ten Image Animation Platforms With Less Guesswork
In this post, we will be choosing ten image animation platforms with less guesswork. A still image often carries more creative value than people admit. It holds framing, subject hierarchy, lighting, and emotional direction before any motion is added. The real challenge is not always inventing a video from nothing. It is converting a finished…
AI, Cybersecurity, Global Security News
The Ultimate Guide to Secure Sweepstakes Gaming Platforms
Discover the most secure sweepstakes gaming platforms. Learn how fair play technology and encrypted social casino platforms protect your virtual currency entertainment. The digital entertainment landscape has shifted dramatically, with social casinos becoming a powerhouse of online play. However, as the industry grows, so does the importance of discernment. Choosing secure sweepstakes gaming platforms isn’t…
AI, Global Security News
AI SOC vendors are selling a future that production deployments haven’t reached yet
Vendors selling AI-powered security operations platforms have built their pitches around a consistent set of promises: autonomous threat investigation, dramatic reductions in analyst workload, and an accelerating path toward humanless operations. Practitioners buying and deploying those platforms describe something different. A report by Anton Chuvakin, Security Advisor at Google Cloud’s Office of the CISO, and…
AI, Global Security News
How one man used 10,000 bots to steal $8,000,000 from music artists
A man has pleaded guilty to defrauding online music streaming platforms out of more than US $8 million, after creating hundreds of thousands of songs with AI, and then using bots to play them billions of times. Read more in my article on the Hot for Security blog.
AI, Global Security News
Rubrik Data Protection for Google Workspace Helps Enterprise Customers Achieve End-to-End Cyber Resilience
COMPANY NEWS: One of the first unified cyber resilience platforms for Google Workspace; provides customers with comprehensive protection across data, identity, and AI Accelerates recovery of operations to minutes, from days; keeps original data and systems intact
AI, Apps, Exploits, Global Security News, Government & Policy, Russia
Russian hackers go after high-value targets through Signal
Russian intelligence-linked hackers are targeting commercial messaging platforms, with Signal a primary focus, the FBI and CISA warn. The campaign is aimed at individuals of intelligence interest, including government personnel, journalists, and others with access to sensitive communications. It is believed that the campaign has compromised thousands of commercial messaging applications accounts. People who use…
Global Security News
Mark Zuckerberg Is Building an AI Agent to Help Him Be CEO
The Meta Platforms chief uses the tool to get information faster as the company seeks to embrace artificial intelligence in all it does.
Global Security News
UiPath Collaborates with Microsoft to Accelerate Security and Confidence for Automated Workflows
Integration demonstrates the power of agentic automation and security platforms working together to protect modern enterprises
Global Security News, Government & Policy
Trump Administration Set to Receive $10 Billion Fee for Brokering TikTok Deal
Investors in the social-media platform’s U.S. business agreed to give the government several multibillion-dollar payments, sources say.
AI, Global Security News
Meta adds new WhatsApp, Facebook, and Messenger anti-scam tools
Meta is introducing new anti-scam protections across its platforms, deploying systems and user-facing warnings to protect users against scammers. […]
AI, china, Cybersecurity, Endpoint, Exploits, Global Security News, Government & Policy, malware, Network Security, Risk Management, Russia
12 ways attackers abuse cloud services to hack your enterprise
Attackers are increasingly abusing trusted SaaS platforms, cloud infrastructure, and identity systems to blend malicious activity into legitimate enterprise traffic. Adversaries are pushing command and control (C2) through high-reputation services, including OpenAI and AWS, to blend in with normal business traffic and evade blocklists. The shift from “living off the land” to “living off the…
Endpoint, Global Security News
5 Best Next Gen Endpoint Protection Platforms in 2026
Discover the best next-gen endpoint protection platforms in 2026, built to detect modern threats, stop credential abuse, and secure enterprise devices.
AI, APAC, Cybersecurity, Exploits, Funding, Global Security News, Government & Policy, Risk Management
VulnCheck Raises $25M to Expand Channel Threat Intelligence
VulnCheck has raised $25 million in Series B funding as demand grows for exploit intelligence platforms that help enterprises and government agencies respond to vulnerabilities in real time. The cybersecurity company plans to use the capital to expand its threat intelligence capabilities and scale its global channel partner program. We spoke with Mike Deskewies, head…
AI, Global Security News, privacy
Meta AI in WhatsApp organizes chats and reopens privacy issues
The trend of integrating AI into digital platforms continues. In the latest Android beta release (2.26.9.4), the company has introduced a feature that allows users to organize their chat history with the help of Meta AI. Organize WhatsApp chats with Meta AI (Source: WABetaInfo) Some beta testers can access a new feature that lets them…
AI, china, Global Security News
Meta tightens grip on scam advertisers
Meta is stepping up the fight against scams on its platforms by filing multiple lawsuits targeting companies and individuals in Brazil, China, and Vietnam who used deceptive tactics to run scam ads. The company said it has taken technical enforcement actions in these cases, including suspending payment methods used in the scams, disabling accounts linked…
AI, china, Global Security News
Meta Files Lawsuits Against Brazil, China, Vietnam Advertisers Over Celeb-Bait Scams
Meta on Thursday said it’s taking legal action to tackle scams on its platforms by filing lawsuits against what it calls deceptive advertisers based in Brazil, China, and Vietnam. As part of the effort, the advertisers’ methods of payment have been suspended, related accounts have been disabled, and the website domain names used to pull…
AI, Global Security News
Telegram rises to top spot in job scam activity
Encrypted messaging platforms are becoming a primary channel for Authorised Push Payment (APP) fraud, with Telegram representing a growing share of reported cases, according to the Revolut report. APP scam origination by % Social Media platform (Source: Revolut) The platform generates over 20% of authorised fraud origination, surpassing WhatsApp and posting growth of more than…
AI, Global Security News, Risk Management
Multiple Zero-Day Flaws in PDF Platforms Enable XSS and One-Click Attacks
16 zero-day security flaws found in Foxit and Apryse PDF platforms could lead to account takeover and RCE. Learn how AI identified these risks.
AI, Global Security News, Risk Management
Enterprises are racing to secure agentic AI deployments
AI assistants are tied into ticketing systems, source code repositories, chat platforms, and cloud dashboards across many enterprises. In some environments, these systems can open pull requests, query internal databases, book services, and trigger automated workflows with limited human involvement. The State of AI Security 2026 from Cisco places this level of access inside a…
AI, Global Security News, Risk Management
Quantum security is turning into a supply chain problem
Supplier onboarding, invoice processing, and procurement platforms run on encrypted data flows that were built for long-term trust. In many organizations, that trust still depends on cryptographic standards like RSA and elliptic curve cryptography (ECC), even as security teams begin planning for a post-quantum world. A recent apexanalytix research report argues that supply chain leaders…
AI, Compliance, Cybersecurity, Endpoint, Europe, Global Security News, Network Security
5 key trends reshaping the SIEM market
Security information and event management (SIEM) platforms have evolved far beyond their basic log collection and correlation roots. With cyber threats moving too fast for manual intervention, leading vendors have been integrating artificial intelligence and machine learning technologies into their SIEM platforms. In addition, modern SIEM platforms now incorporate extended detection and response (XDR) and…
Global Security News, Government & Policy, Legal, Russia, Security
Russia tries to block WhatsApp, Telegram in communication blockade
The Russian government is attempting to block WhatsApp in the country as its crackdown on communication platforms not under its control intensifies. […]
Global Security News
“What?” – About Platform Engineering in DevSecOps
On “Digital Transformation” in DevSecOps at the CBA; using modular-construction platforms for the support of digital product delivery.
Global Security News
“What?” – About Platform Engineering in DevOps
On “Digital Transformation” in DevSecOps at the CBA; using modular-construction platforms for the support of digital product delivery.
Global Security News
Two Connecticut Men Charged In Alleged $3m Gambling Fraud Scheme
Two Connecticut men face federal charges for a $3m scheme targeting online gambling platforms
Cybersecurity, Global Security News, Tutorials
Digital Fingerprinting in 2026: What Platforms Know About You Before You Click
Platforms don’t need cookies to track you. Learn how digital fingerprinting works across four layers and practical steps to reduce your exposure. You cleared your cookies. You’re using incognito mode. Maybe you even have a VPN running. None of that matters as much as you think. Modern platforms don’t need cookies to identify you. They’ve…
AI, Crypto, Cybersecurity, fraud, Global Security News, Scams and Fraud
Common Crypto Scams and How to Protect Your Funds in 2026
Crypto scams are surging worldwide, from pig butchering to fake trading platforms and deepfakes, draining victims while fraud teams struggle to keep up.
AI, Android, android security, Cybersecurity, Exploits, Global Security News, privacy, Risk Management
Android Quick Share Support for AirDrop: A Secure Approach to Cross-Platform File Sharing
Posted by Dave Kleidermacher, VP, Platforms Security & Privacy, Google Technology should bring people closer together, not create walls. Being able to communicate and connect with friends and family should be easy regardless of the phone they use. That’s why Android has been building experiences that help you stay connected across platforms. As part of…