Microsoft finally patches critical one-click Copilot vulnerability, almost eight months after learning of it
“This is the pattern CISOs must internalize: in agentic systems, the malicious action and the legitimate action are the same...
This
Microsoft’s August Patch Tuesday: 400+ Bugs Fixed, One Zero-Day Already Under Attack
Microsoft released patches for over 400 CVEs this Patch Tuesday, including one actively exploited zero-day and several critical remote code...
Enterprise Defenses Recovered at the Edge and Collapsed Inside
Enterprise defenses are tuned to catch the attacks that make noise. This year's data shows attackers winning by making none....
AI Genie in the Wild
AI Genie in the Wild When I give talks about AI genies, I use this sort of example as a...
⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks
This week kept coming back to permission. A model crossed a boundary. A wallet trusted bad randomness. Webmail kept an...
Three-headed dogs and long tails: Sophos at BSides LV
In addition to Sophos’ presence at Black Hat USA this year, data scientists from the Sophos AI team will present...
Friday Squid Blogging: Illex Squid Catch in the Falklands
Friday Squid Blogging: Illex Squid Catch in the Falklands Lower catch this year. As usual, you can also use this...
ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories
Ravie LakshmananJul 23, 2026Hacking News / Cybersecurity News Most of this week's trouble came dressed as something useful. A package...
LG to Ban Residential Proxies from Smart TV Apps
The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart...
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More
Ravie LakshmananJul 20, 2026Cybersecurity / Hacking A single request should not be able to do this much. But this week,...
In code we trust? Why the most trusted software receives the least scrutiny.
This article is part of an ongoing series from our own specialists, sharing the cutting-edge research they use to strengthen...
Apple widens OpenAI trade secrets fight with preservation orders
Why this matters beyond the protagonists In making its move, Apple shows this is not a dispute about just one...
ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories
Ravie LakshmananJul 16, 2026Hacking News / Cybersecurity News A lot of this week’s trouble starts with something that looks close...
The State of Ransomware 2026: Payments are dropping but encryption is climbing
This year's data has a few eyebrow-raising departures from the patterns of past State of Ransomware reports. Exploited vulnerabilities lost...
With its latest layoffs, Microsoft goes all in on AI
This year, in April and May, the company rolled out its first voluntary retirement program for its US employees. Approximately...
