In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are ...

A hacker used a VPN to stay anonymous. Microsoft's Windows Global Device Identifier logged his activity anyway and handed it ...

Threat actors are abusing Microsoft Teams voice calls by impersonating corporate IT support staff to trick employees into ...

The FBI used a Microsoft device identifier, dubbed GDID, to link a teenager to a hack attributed to Scattered Spider, raising ...

The big picture: People have grumbled about Windows telemetry for years, to the point that an entire cottage industry of tools that clean up the OS now exists just to strip the tracking bits out.

Kaspersky says the attacks use phishing, GitHub-hosted payloads, CVE-2025-9491 LNK abuse, and Go2Tunnel-based tunneling.

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...

Germany plans to give its spy agencies powers to hack, disrupt and deceive foreign attackers in a major overhaul of post-war ...

So what?” needs to be our response to the salacious, titillating and terrifying hacks that could come our way.