Vercel breach exposes the OAuth gap most security teams cannot detect, scope or contain

One employee at Vercel adopted an AI tool. One employee at that AI vendor got hit with an infostealer. That combination created a walk-in path to Vercel’s production environments through an OAuth gr [...]

Capital One releases VulnHunter, an open-source AI tool that finds software flaws before hackers do

Capital One on Thursday released VulnHunter, an open-source, agentic AI security tool that scans source code for exploitable vulnerabilities, maps out how an attacker would reach them, and proposes ta [...]

I'm not losing sleep over Elon Musk's political ambitions

Just a month after his explosive fallout with Donald Trump, Elon Musk is floating the idea of forming his own political party. In a poll on X, 1.24 million of his followers voted, with 65.4 percent sa [...]

OpenAI now accepting ChatGPT app submissions from third-party devs, launches App Directory

OpenAI has begun accepting submissions from third-party developers for their apps to be accessible directly in ChatGPT, and has launched a new App Directory (don't call it a "store"!) t [...]

The best password manager for 2025

Recently, we saw all the ways reused passwords can harm your security posture. The 23andMe attack comes to mind, but generally credential stuffing has been on the rise. Hackers can buy or find your re [...]

Workday says hackers used social engineering to access personal data during a breach

Human resources technology company Workday has confirmed that a data breach has affected its third-party CRM platform. In a blog post announcing the breach, the company said that a social engineering [...]

T-Mobile is under fire again over its 2021 data breach

T-Mobile is once again being sued by Washington state over the 2021 data breach which exposed sensitive information for over 79 million people, The Verge reports. The lawsuit filed on Monday alleges t [...]

Claude didn't just plan an attack on Mexico's government. It executed one for a month — across four domains your security stack can't see.

Attackers jailbroke Anthropic’s Claude and ran it against multiple Mexican government agencies for approximately a month. They stole 150 GB of data from Mexico’s federal tax authority, the nationa [...]

Anthropic reinstates OpenClaw and third-party agent usage on Claude subscriptions — with a catch

Good news, OpenClaw fans — you can once again use your Claude AI subscription to power the hit, open source, autonomous AI agentic harness! But, there's a big catch with how it's being ena [...]