Presented by Veriff Americans struggle to differentiate between real and AI-generated content, posing a significant challenge for businesses relying on online identity verification. Recent research reveals that despite awareness of deepfakes, people’s ability to recognize them is only slightly better …
Cybersecurity experts have revealed a vulnerability in OpenAI ChatGPT that exploits the AI assistant’s trust in Markdown links and images, potentially opening the door to phishing attacks. The technique, known as ChatGPhish by Permiso Security, takes advantage of ChatGPT’s auto-fetching …
ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface Read More »
DataGrail Report Highlights Challenges in Trusting Data Processing Agreements According to DataGrail’s Privacy and AI Trends Report 2026, the data processing agreement (DPA) that companies rely on to assess how vendors handle personal data can no longer be taken at …
DataGrail report finds your vendor may be sending data to AI models you never approved Read More »
Two separate banking trojan campaigns are targeting Latin America and Europe, infecting Windows and Android devices with Grandoreiro and BTMOB malware, respectively, as reported by WatchGuard and ESET. These campaigns are aimed at companies in Spain, Portugal, Mexico, and mobile …
Grandoreiro Malware and BTMOB RAT Campaigns Target Windows and Android Users Read More »
The Changing Landscape of Cyber Threats in Financial Services A recent report by CrowdStrike highlighted the increasing threat posed by cyber attackers to the financial services sector. Interestingly, the attacker who targeted the most financial services organizations in the past …
î „Ravie Lakshmananî ‚May 25, 2026Cybersecurity / Hacking Monday recap. Same mess, new week. A sketchy dev tool got people pwned, old bugs came back from the dead, and security products somehow needed protecting from themselves. A bunch of companies spent the …
Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos Read More »
Recently, there have been alarming incidents of malicious npm packages passing Sigstore provenance verification due to compromised signing certificates. These events highlight the limitations of automated trust signals and the need for enhanced security measures. Another concerning incident involved the …
Valid certificates, stolen accounts: how attackers broke npm's last trust signal Read More »
î „Ravie Lakshmananî ‚May 23, 2026Software Supply Chain / DevSecOps GitHub recently introduced new controls for npm to enhance the security of the software supply chain. The new feature, staged publishing, allows maintainers to approve a release before it is publicly available …
npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks Read More »
The compliance dashboard was green across every identity control. And the attacker was already inside, moving laterally through Active Directory with a valid session token, escalating privileges on a trajectory toward the domain controller. This is the scenario playing out …
MFA verifies who logged in. It has no idea what they do next. Read More »
Cybersecurity experts have revealed details about a new Linux malware known as Showboat, which has been utilized in a targeted campaign against a telecommunications company in the Middle East since mid-2022. Showboat is described as a modular post-exploitation framework for …
Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoor Read More »
