Vercel breach exposes the OAuth gap most security teams cannot detect, scope or contain

One employee at Vercel adopted an AI tool. One employee at that AI vendor got hit with an infostealer. That combination created a walk-in path to Vercel’s production environments through an OAuth gr [...]

Meta's AI support agent bound recovery emails for anyone who asked. Your SOC never saw an alert.

Meta's AI support agent bound recovery emails to accounts for whoever asked, and SOCs never saw an alert. An authorized agent writes a log of legitimate transactions, so nothing in the detection [...]

Claude didn't just plan an attack on Mexico's government. It executed one for a month — across four domains your security stack can't see.

Attackers jailbroke Anthropic’s Claude and ran it against multiple Mexican government agencies for approximately a month. They stole 150 GB of data from Mexico’s federal tax authority, the nationa [...]

T-Mobile is under fire again over its 2021 data breach

T-Mobile is once again being sued by Washington state over the 2021 data breach which exposed sensitive information for over 79 million people, The Verge reports. The lawsuit filed on Monday alleges t [...]

SonicWall customers told to reset credentials following firewall data breach

SonicWall suffered a brute-force attack which could affect thousands of its customers. [...]

Marquis confirms data breach, point finger of blame at SonicWall firewall

Marquis wants SonicWall to pay for the damages, but firewall maker asks for proof that two incidents are linked. [...]

Hackers are breaking SonicWall products to target business networks

A newly found SonicWall zero-day is already being exploited in the wild. [...]

SonicWall VPN flaw could allow hackers to hijack your sessions, so patch now

Security researchers are urging SonicWall users to apply the available fix as soon as possible. [...]

SonicWall tells customers to patch SonicOS flaw allowing hackers to crash firewalls

A high-severity flaw was found in SonicWall OS SSLVPN which can be used to trigger DoS. [...]