Ken Underhill

Proofpoint warns that device code phishing attacks are rapidly growing across Microsoft 365 environments.

7AI uncovered a browser-extension campaign that bypassed EDR defenses to inject malicious JavaScript into authenticated browser sessions.

A recent survey shows cybersecurity professionals increasingly believe AI is making cybercriminals more capable and attacks more scalable.

Researchers showed how attackers could steal data from AI agents inside NVIDIA NemoClaw environments.

More than 1 million baby monitors and security cameras were reportedly exposed through vulnerabilities tied to Meari Technology.

Researchers warn that banks may be overlooking AI risks at the database layer.

Researchers demonstrated a Claude Code attack that steals OAuth tokens through malicious MCP integrations and npm hooks.

AI-assisted development is expanding software supply chain risks faster than security controls can keep pace.

SMBs are struggling to balance rapid AI adoption with governance, security, and shadow AI risks.

Cisco researchers found that tiny, nearly invisible image perturbations can bypass vision language model safety mechanisms.

A ShinyHunters-linked attack disrupted hundreds of Instructure Canvas portals during finals week.

Deepfake attacks are exposing gaps in cyber insurance policies and traditional security controls.