Enterprise Defenses Recovered at the Edge and Collapsed Inside
Enterprise defenses are tuned to catch the attacks that make noise. This year's data shows attackers winning by making none....
Make
Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers
Attacker-controlled instructions can make Atlassian's Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send...
Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents
Swati KhandelwalJul 30, 2026Vulnerability / AI Security Hidden instructions in a Word document can make Microsoft 365 Copilot rewrite figures...
Google’s Gemini lets strangers send messages from your locked Android phone
Gemini, Google's AI assistant, is supposed to make life easier for Android smartphone owners. But right now it may also...
AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code
Hidden text on a web page was enough to make Kiro, AWS's agentic coding IDE, rewrite its own configuration file...
OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests
Eleven bytes will make an unpatched OpenSSL server set aside up to 131 KB of memory for a message that...
AI Chatbot Warnings May Not Stop Hallucinations, Researchers Say
Warning labels can tell users that AI chatbots make mistakes. They do not prove users will check the answer before...
On AI Security
On AI Security Good report: Executive Summary: Let’s say you wanted to make sure that your AI is secure. Can...
Apple Rolls Out Fix: New macOS Update Could Protect 100M Mac Users
Image: Joan Gamell/Unsplash Apple is stepping in to stop a mistake millions of users make every day: copying and pasting...
Using an AI like ChatGPT to File Your Taxes? Stop and Read This First
Tax season is a headache for many people, and when a shortcut promises to make filing easier, it’s hard to...
Zero Trust in the Age of AI: Why the Classic Model Isn’t Enough Anymore
Here's a statement that should make any security architect pause: In most enterprise environments today, machine identities – service...
Zero Trust in the Age of AI: Why the Classic Model Isn’t Enough Anymore
Here's a statement that should make any security architect pause: In most enterprise environments today, machine identities – service...
Cultivating a robust and efficient quantum-safe HTTPS
Posted by Chrome Secure Web and Networking Team Today we're announcing a new program in Chrome to make HTTPS certificates...
Top 5 Ways Broken Triage Increases Business Risk Instead of Reducing It
Triage is supposed to make things simpler. In a lot of teams, it does the opposite. When you can’t reach...
This Week in Scams: AI Search Traps, a Fintech Breach, and a $12M Louvre Hustle
AI is supposed to make the internet easier. But right now, it’s also making scams easier. Every week, we round up the biggest scam and cybersecurity...
