Every report filed under this tag.
Threat actors are using passkey-themed social engineering to compromise Microsoft 365 accounts and gain access to sensitive cloud data, according to Microsoft Threat Intelligence.
Security researchers have discovered that nearly one in ten publicly accessible LiteLLM deployments were either using the platform's default administrative key or operating without authentication, potentially exposing AI infrastructure to serious attacks.
A joint U.S. advisory alleges DeepSeek, Alibaba, Moonshot AI and others have pulled billions of tokens out of Claude, GPT, Gemini and Grok since late 2024 to shortcut their own model training.
Cybersecurity researchers have uncovered a large-scale cryptojacking campaign that compromised 3,562 unique Redis servers, turning exposed database infrastructure into cryptocurrency-mining workers.
Cybercriminal group Slim Spider has targeted a Brazilian financial institution in an operation focused on stealing sensitive information associated with cryptocurrency custody operations.
One brief each morning: the advisories that matter, the noise removed.
Double opt-in. One-click unsubscribe in every email. We never sell addresses.