That helpful “Summarize with AI” button? It might be secretly manipulating what your AI recommends. Microsoft security researchers have discovered a growing trend of AI memory poisoning attacks used ...

First malicious Outlook add-in abused an abandoned domain to host a fake Microsoft login page, stealing 4,000+ credentials in a supply chain attack.

Also today, SAP released 27 new and updated security notes, including two that address critical-severity vulnerabilities.

We are seeing exploitation of SolarWinds Web Help Desk via CVE‑2025‑40551 and CVE‑2025‑40536 that can lead to domain compromise; here is how to patch, hunt, and mitigate now.

Many modern attacks happen entirely inside the browser, leaving little evidence for traditional security tools. Keep Aware ...

A new open-source and cross-platform tool called Tirith can detect homoglyph attacks over command-line environments by ...

Microsoft has patched the Windows Notepad remote code execution vulnerability CVE-2026-20841, warning users to install ...