Ken Underhill

LayerX researchers discovered a technique that tricks AI browsers into bypassing security guardrails.

KDDI disclosed a breach that may have exposed up to 14.2 million email accounts after attackers exploited a third-party software vulnerability.

The DOJ seized nearly 400 illegal World Cup streaming domains, warning that piracy sites also pose malware and phishing risks.

Barracuda researchers found that weak credentials and exposed remote services continue to fuel malware, botnet, and credential attacks.

Enterprise buyers are increasingly relying on SOC 2 audits and compliance evidence to evaluate vendor security during procurement.

Researchers found GEO poisoning techniques can influence AI-generated answers by manipulating publicly available web content.

More than 236,000 scam domains were linked to the legitimate DCloud Uni-App framework.

Kitana combines AI-assisted development with adversary-in-the-middle attacks to steal credentials and payment information in real time.

Arctic Wolf found FortiBleed uses stolen FortiGate credentials to gain enterprise access.

Operation Endgame disrupted StealC infrastructure and seized millions of stolen credentials through a coordinated public-private effort.

PixelSmash, a FFmpeg vulnerability, could allow specially crafted media files to trigger remote code execution.

Scope squatting on ClawHub highlights AI supply chain risks.