Browser AI agent security research: security researcher Gal Weizman of Forever Security demonstrated that one ordinary browser extension can hijack AI agents in Chrome, Edge, Perplexity Comet, Opera ...

A study reveals the extent of the espionage capabilities of the Russian super-app Max. The state-mandated application is ...

Exploiting Unauthenticated API Gateways in AWS September 21, 2026 sara.pearlman@guidepointsecurity.com BLOG  5 min. Over the past year, GuidePoint’s Threat and Attack Simulation (TAS) team has ...

Hackers use compromised websites and blockchain-based servers to steal bank logins and 2FA codes through malicious PowerShell ...

Cache key injection can expose restricted data, disrupt websites, or poison cached pages with malicious content.

A newly disclosed BragJack is a browser-extension attack technique that can hijack built-in AI assistants across five ...

A newly disclosed WordPress Core vulnerability chain, dubbed Click2Shell, allowed unauthenticated attackers to force a logged ...

A malware campaign using the EtherHiding technique has exploited the Polygon blockchain to conceal and dynamically rotate command-and-control infrastructure while stealing banking and cryptocurrency ...

Hackers claim breach of Russia's election commission; OpenAI was behind the RubyGems May incident; Gyazo and Revolut got ...

The full picture and practical recipes for the ultra-fast 200ms, 1/10th cost, 100% type-safe 'System One' model~0.

On September 16, 2026, GitHub made its AI-powered Security Scan significantly easier to use.GitHub's 'AI Scan' is a feature that analyzes changes in a Pull Request (PR) using AI to identify security ...