ChatGPT Wallet lets agents pay without seeing your card number
OpenAI began rolling out ChatGPT Wallet, which lets ChatGPT agents pay for purchases with a stand-in card number, so the user’s card details are not shared with the agent or …
Fake GTA 6 download goes after Steam logins and crypto wallet data
Cynet researchers followed a “GTA 6 EXE file download” link from a Google Colab notebook to a ZIP archive and found a WARDEN Stealer loader inside. The malware takes saved …
Apple details Secure Exclaves, isolated runtimes for camera and microphone data
Apple published details of Secure Exclaves, a security architecture designed to protect camera and microphone data during background processing. Apple says data processed and …
354 dark web vendors and buyers arrested in Operation TorNado
Europol and police in 14 countries arrested 354 dark web vendors and buyers in Operation TorNado, which ran from May 2025 to October 2026. Investigators went after people who …
OpenAI’s Daybreak brings AI agents to security testing and vulnerability fixes
OpenAI is bringing AI agents into more of the software security process with Daybreak, pairing web application penetration testing with tools that investigate vulnerabilities …
Stolen webcam clips of 900+ victims feed North Korea’s $400 million fake Zoom scheme
North Korean state hackers have stolen more than $400 million in cryptocurrency over the past 18 months by pulling targets into fake Zoom and Teams calls filled with webcam …
How attackers turned a Teams meeting booking into a device code phishing trap
Attackers used a fake Microsoft Teams meeting scheduler to trick an employee at a construction company into approving a device code sign-in. They got a valid session token …
Suspected North Korean IT workers reached onboarding at companies with open data
Material Security followed suspected North Korean fake IT workers through the hiring pipelines of organizations it monitors and counted 27 personas that reached onboarding …
Your pinned MCP server may not be as pinned as you think
An MCP server configured to run one fixed release on an administrator’s workstation ran with 15 different sets of dependencies over five weeks, with its configuration …
Digital sovereignty leaves enterprises chasing their own audit trails
94% of surveyed enterprises experienced at least one digital sovereignty challenge in the past three years, according to IBM’s Digital Sovereignty Index. Of those affected, …
Google smart glasses privacy features cover wearers and the people around them
Google has built its Gemini-powered intelligent eyewear to stop taking photos and video when someone covers or tampers with the outward-facing recording light. Shahram Izadi, …
Fake Zillow pages use ClickFix NetSupport RAT to target apartment hunters
EfficientIP Research Labs traced a ClickFix campaign that used fake Zillow apartment-review pages to install NetSupport RAT on visitors’ Windows computers. Each page showed …
Featured news
Resources
Don't miss
- Fake GTA 6 download goes after Steam logins and crypto wallet data
- Stolen webcam clips of 900+ victims feed North Korea’s $400 million fake Zoom scheme
- How attackers turned a Teams meeting booking into a device code phishing trap
- Suspected North Korean IT workers reached onboarding at companies with open data
- Your pinned MCP server may not be as pinned as you think