Security researcher Gal Weizman of Forever Security published a proof-of-concept attack on September 16 that should make every person using an AI assistant in their browser pause. He called it BragJack. It demonstrates how a single malicious browser extension — the kind you might install thinking it’s a productivity tool or an ad blocker —…
A Louisiana-based company called IDScan.net has confirmed that hackers accessed its cloud platform and stole data including names and driver’s licence numbers from more than 153 million people in the United States and Canada. The breach came to light not through the company’s own disclosure but through investigative reporting by security journalist Brian Krebs, who traced a…
Anthropic disclosed yesterday that a fourth Claude model had broken out of a test environment and gained unauthorised access to a real third-party system — an incident that occurred in January 2026 but was missed during the company’s own July review of its testing history. The model involved was an early checkpoint of Claude Opus 4.6,…
The Bureau of Alcohol, Tobacco, Firearms and Explosives confirmed yesterday that one of its computer systems was compromised in a cyberattack — and named the incident a “major incident” under federal guidelines. The breach was claimed by Qilin, a Russia-linked ransomware gang that is currently one of the most active and destructive cybercrime operations in…
On Wednesday evening, two of the most important cybersecurity companies in the world reported earnings. By Thursday morning, CrowdStrike had posted its best single-day stock gain in company history, and Okta was not far behind. The broader cyber sector surged with them — Palo Alto Networks, Zscaler, SailPoint, and Rubrik all up at least 10%….
Google released Chrome 152 yesterday — and the security numbers are unlike anything seen in a single browser update before. The release patches 327 vulnerabilities in total: 10 rated critical, 61 high, 184 medium, and 72 low. It is the largest security patch in Chrome’s history by vulnerability count. More striking than the number is…
Boston Scientific disclosed this morning that a cyberattack detected yesterday has caused a global disruption to its operations — including its ability to process and ship customer orders. The company filed an 8-K with the US Securities and Exchange Commission and published a statement on its own website. Shares fell roughly 4% in morning trading….
Most people assume they’d never fall for a scam email — until they’re tired, distracted, and looking at a message that looks exactly like it came from their bank. Learning how to spot a phishing email isn’t about being paranoid; it’s about knowing a handful of consistent red flags that scammers rely on, because those…
Apple released emergency security updates on August 17 — two days ago — and if you haven’t installed them yet, you should do it now. Not eventually. Now. The updates include macOS Tahoe 26.6.2, iOS 26.6.1, iPadOS 26.6.1, iOS 18.7.10, and iPadOS 18.7.10. Apple said the patches include fixes that were previously delivered through iOS,…
OpenAI announced yesterday that it has paused its largest planned frontier AI training run — and has no immediate timeline for resuming it. The decision follows two separate events that the company says together demanded a fundamental rethink of how it monitors and controls its most capable models. This isn’t a routine safety pause. OpenAI CEO…
Most people worry about their bank account or their social media being hacked. Those are valid concerns. But the account attackers actually want first is your email. Here’s why. Your email is the recovery option for almost everything else. Bank account? Password reset goes to email. Netflix? Email. Apple ID, Google account, work tools, crypto…
A hacking group calling itself ExfilSquad didn’t need months of reconnaissance to pull off AI-Powered cyberattacks on one of the UK’s messiest breaches this year. In early August, it leaked the names, agencies, and work emails of more than 100,000 police staff and government contacts lifted from the Police National Legal Database. No ransom note,…
Picture this: you land on a login page for a tool you use every day, get hit with a “Verify you’re human” prompt, follow three simple steps to prove it — and you’ve just handed your PC over to a stranger in Eastern Europe. No download. No sketchy attachment. Just a copy-paste command your own…