Introducing Sophos AI Defense
Built for how organizations really use AIMost AI security tools are built to secure models, pipelines, or future-state platforms. Sophos...
Vendor News
Category Added in a WPeMatico Campaign
The Signs Were There: What the First Autonomous Ransomware Case Confirms
Key takeaways Security researchers have documented an AI agent running a full ransomware operation on its own against a live...
Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
Russian state-aligned hackers have been compromising governmental and commercial organizations throughout the West through zero-click phishing emails, federal agencies in...
If you pay a hacker’s ransom, chances are that they’ll come back for more
Governments have long warned not to pay a hacker’s ransom demands, arguing that doing so only lets criminals profit from...
Google Adds Selfie Video Sign-In to Help Users Recover Locked Accounts
Google on Thursday rolled out selfie video as a new sign-in and account recovery option for eligible Google Account users,...
13M+ Emails Sent in Tech Support Scam Targeting Users, Organizations in Japan
Over roughly three months (February 26 – May 31, 2026), we confirmed 4,721 fake alert sites but only 11 distinct...
Inside the OpenAI – Hugging Face Incident: The AI Breach With No Human Attacker Behind It
Given enough leeway, an AI system can cause real damage entirely on its own, with no malicious intent and no...
One Password Mistake Helped Hackers Access Chick-fil-A Account
Reused passwords have once again given cybercriminals an easy way into customer accounts. Chick-fil-A has disclosed that attackers used a...
Windows 11 Security Cheat Sheet: BitLocker, Passkeys, and Defender Explained
Windows 11 comes with plenty of built-in security tools, but figuring out what each one does can be confusing. BitLocker...
When the “attacker” is an AI agent
Last week, Hugging Face disclosed a security incident of a new kind: an intrusion carried out end to end by...
Google Holds Back Gemini 3.5 Flash Cyber as CodeMender Enters Preview
Google has built a cybersecurity model capable of finding vulnerabilities, checking whether they can be exploited, and generating patches. Most...
Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass
In one of the cases we have investigated, a few hours after the user approved the request, the attacker signed...
Third-Party SDKs Raise Privacy Questions for Apps Marketed to U.S. Military
The biggest privacy risk on smartphones may not be the apps themselves, but the third-party code quietly running inside them....
