Vercel breach exposes the OAuth gap most security teams cannot detect, scope or contain

One employee at Vercel adopted an AI tool. One employee at that AI vendor got hit with an infostealer. That combination created a walk-in path to Vercel’s production environments through an OAuth gr [...]

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and au [...]

Aura just announced an incredibly thin color e-ink photo frame

Aura just announced the Ink, a 13-inch color e-ink photo frame. The company says it's the "thinnest e-paper frame available" that is "designed to join a gallery wall or stand alone [...]

Our favorite Aura digital photo frame is $40 off for Black Friday

Putting together a photo album is a sweet way to share memories with loved ones, and a digital frame lets you package those feelings in a device that can be constantly updated with new pictures. Aura [...]

The attack that hijacked Claude Code came through Sentry. Datadog, PagerDuty, and Jira have the same exposure.

A single fake error report hijacked Claude Code in controlled testing — the agent ran the attacker's code with the developer's full privileges, and not one alert fired. EDR, WAF, IAM, and [...]

The attack dominating financial services doesn't steal passwords. It resets MFA and steals the token.

The attacker who hit the most financial services organizations over the past 12 months never phished a password. They called an IT support line, convinced an employee to reset their MFA, and registere [...]

Prime Day has our favorite digital photo frame in stock and on sale for 20 percent off

A digital frame may seem like too obvious of a gift — but that's for a reason. They actually improve upon something we all have around our homes, allowing you to display more of your favorite p [...]

Claude didn't just plan an attack on Mexico's government. It executed one for a month — across four domains your security stack can't see.

Attackers jailbroke Anthropic’s Claude and ran it against multiple Mexican government agencies for approximately a month. They stole 150 GB of data from Mexico’s federal tax authority, the nationa [...]

Netomi raises $110 million as Accenture and Adobe bet on AI for customer service

Netomi, the San Francisco-based startup building AI systems for enterprise customer service, said Thursday that it has raised $110 million in new funding in a round led by Accenture Ventures, with par [...]