Daily
The Press Corner
A short résumé of each security publication from the daily scan, with the topic and a link to the original. The scan runs every day at 01:15 UTC. If that run misses, the next hourly pass picks it up. Last scan Oct 23, 2026.
English. 91–105 of 239
CometJacking: One Click Can Turn Perplexity’s Comet AI Browser Into a Data Thief
A single malicious URL can hijack Comet AI browser, exfiltrating emails, calendar, and user memory via encoded payloads.
The State of AI in the SOC 2025 - Insights from Recent Study
SOC teams face 960 daily alerts; 40% uninvestigated while AI adoption accelerates to cut risks
⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit-Flips, npm Worm & More
Explore emerging attack methods, evolving AI-driven threats, supply chain risks, and strategies to strengthen defenses and stay ahead of cyber risks.
How to Gain Control of AI Agents and Non-Human Identities
Non-human identities outnumber humans 80:1, creating hidden security gaps and escalating AI-driven attack risks.
Apple Warns French Users of Fourth Spyware Campaign in 2025, CERT-FR Confirms
Apple warned French users of spyware on Sept 3, 2025, marking its fourth alert this year.
FBI Warns of UNC6040 and UNC6395 Targeting Salesforce Platforms in Data Theft Attacks
FBI warns UNC6040, UNC6395 breached Salesforce via OAuth tokens and vishing, sparking theft and extortion.
Noisy Bear Campaign Targeting Kazakhstan Energy Sector Outed as a Planned Phishing Test
Noisy Bear hit KazMunaiGas in May 2025 via phishing emails, using Aeza Group hosting.
When Browsers Become the Attack Surface: Rethinking Security for Scattered Spider
Over 80% of security incidents stem from browser-based apps, with Scattered Spider exploiting sessions and APIs.
Why SIEM Rules Fail and How to Fix Them: Insights from 160 Million Attack Simulations
Organizations detected only 1 in 7 attacks in 2025; log failures, misconfigurations, and performance issues left systems exposed.
Malicious Go Module Poses as SSH Brute-Force Tool, Steals Credentials via Telegram Bot
Malicious Go module published June 24, 2022 steals SSH credentials via Telegram bot, evading detection.
Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code
CVE-2025-25256 in FortiSIEM scored 9.8 CVSS; active exploit found, prompting urgent patching. (
6 Lessons Learned: Focusing Security Where Business Value Lives
Refined exposure management cuts remediation by 96%, aligning security with business priorities for stronger, efficient protection.
Researchers Uncover GPT-5 Jailbreak and Zero-Click AI Agent Attacks Exposing Cloud and IoT Systems
Researchers bypass GPT-5 guardrails using narrative jailbreaks, exposing AI agents to zero-click data theft risks.
The Wild West of Shadow IT
Everyone's an IT decision-maker now. Here's how to keep your organization safe in the world of Shadow IT.
3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSocket Tactics
JavaScript cryptojackers hit 3,500+ sites using stealth WebSocket miners and Magecart-linked infrastructure.