Stolen Claude session cookies can reach corporate Gmail through grants no IT admin can revoke

Infostealers replayed stolen Claude session cookies into paid accounts without ever touching the login page two-factor authentication guards.The accounts Anthropic flagged were card-billed, self-serve [...]

Stolen Claude session cookies can reach corporate Gmail through grants no IT admin can revoke

Infostealers replayed stolen Claude session cookies into paid accounts without ever touching the login page two-factor authentication guards.The accounts Anthropic flagged were card-billed, self-serve [...]

Vercel breach exposes the OAuth gap most security teams cannot detect, scope or contain

One employee at Vercel adopted an AI tool. One employee at that AI vendor got hit with an infostealer. That combination created a walk-in path to Vercel’s production environments through an OAuth gr [...]

Engadget Podcast: iPhone 16e review and Amazon's AI-powered Alexa+

The keyword for the iPhone 16e seems to be "compromise." In this episode, Devindra chats with Cherlynn about her iPhone 16e review and try to figure out who this phone is actually for. Also, [...]

Meta hit with a class action lawsuit over smart glasses' privacy claims

Meta is facing a class action lawsuit for false advertising related to its AI glasses following reports about the company's use of human contractors to review footage captured from users' gl [...]

A European AI challenger goes after GitHub Copilot: Mistral launches Vibe 2.0

Mistral AI, the French artificial intelligence company that has positioned itself as Europe's leading challenger to American AI giants, announced on Tuesday the general availability of Mistral Vi [...]

DJI loses lawsuit over Pentagon's 'Chinese military company' list

It's been nearly a year since DJI sued the Department of Defense over its designation as a "Chinese military company." On Friday, a judge ruled against the drone maker. US District Judg [...]

The 11 runtime attacks breaking AI security — and how CISOs are stopping them or can stop them

Enterprise security teams are losing ground to AI-enabled attacks — not because defenses are weak, but because the threat model has shifted. As AI agents move into production, attackers are exploiti [...]

The Defense Department reportedly plans to train AI models on classified military data

The Pentagon is making plans to have AI companies train versions of their models specifically for military use on classified information, according to the MIT Technology Review. If true, it wouldn’t [...]