Why should you be excited about Agentic AI in cybersecurity?
How Do Non-Human Identities Enhance Cloud Security? Have you ever wondered how to effectively manage the increasing complexity of...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
OpenAI Patches ChatGPT Data Exfiltration Flaw and Codex GitHub Token Vulnerability
A previously unknown vulnerability in OpenAI ChatGPT allowed sensitive conversation data to be exfiltrated without user knowledge or consent, according...
TeamPCP’s Telnyx Attack Marks a Shift in Tactics Beyond LiteLLM
The Telnyx compromise indicates a continued change in the techniques used in TeamPCP’s supply‑chain activity, with adjustments to tooling, delivery...
Incident responders, s’il vous plait: Invites lead to odd malware events
Sophos’ Managed Detection and Response (MDR) teams reported on a phishing campaign late last year that attempted to trick users...
While TSA Made Headlines, CISA Went Dark
The Department of Homeland Security has been partially shut down for over 45 days. In that time, 460 TSA...
The AI Exchange: Innovators in Payment Security Featuring Flywire
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature...
China-Linked groups target Southeast Asian government with advanced malware in 2025
China-Linked groups target Southeast Asian government with advanced malware in 2025 Pierluigi Paganini March 30, 2026 China-linked groups hit a...
It’s a mystery … alleged unpatched Telegram zero-day allows device takeover, but Telegram denies
It’s a mystery … alleged unpatched Telegram zero-day allows device takeover, but Telegram denies Pierluigi Paganini March 30, 2026 A...
HIBP Mega Update: Passkeys, k-Anonymity Searches, Massive Speed Enhancements and a Bulk Domain Verification API
31 March 2026 For a hobby project built in my spare time to provide a simple community service, Have I...
Breach Readiness in the Age of Mythos: When Your AI Thinks, Learns, and Defends
Anthropic left details of an unreleased model, an invite-only CEO retreat, sitting in an unsecured data trove in a...
DeepLoad Malware Uses ClickFix and WMI Persistence to Steal Browser Credentials
Ravie LakshmananMar 30, 2026Threat Intelligence / Browser Security A new campaign has leveraged the ClickFix social engineering tactic as a...
⚡ Weekly Recap: Telecom Sleeper Cells, LLM Jailbreaks, Apple Forces U.K. Age Checks and More
Ravie LakshmananMar 30, 2026Cybersecurity / Hacking Some weeks are loud. This one was quieter but not in a good way....
3 SOC Process Fixes That Unlock Tier 1 Productivity
What is really slowing Tier 1 down: the threat itself or the process around it? In many SOCs, the biggest...
Iran-Linked Hackers Breach FBI Director Kash Patel’s Email, Leak Messages Online
Image: REUTERS/Mike Blake An Iran-linked hacking group has targeted FBI Director Kash Patel, breaching his personal email and publishing its...
Passkeys Hit Critical Mass: Microsoft Auto-Enables for Millions, 87% of Companies Deploy as Passwords Near End-of-Life
Breaking: Microsoft begins auto-enabling passkey profiles across all Microsoft Entra ID tenants this week, forcing the largest enterprise migration...