Exploiting Unauthenticated API Gateways in AWS September 21, 2026 sara.pearlman@guidepointsecurity.com BLOG  5 min. Over the past year, GuidePoint’s Threat and Attack Simulation (TAS) team has ...
A joint law enforcement advisory warns that the North Korean hacking group WaterPlum compromised at least 30,000 devices ...
North Korean threat actors, tracked as WaterPlum (also known as Contagious Interview), have compromised at least 30,000 ...
A new phishing kit abuses a legitimate Microsoft device authorization flow intended for use with printers or smart TVs to steal authentication tokens, register attacker-controlled devices and gain ...
On November 5, 2025, Google Threat Intelligence Group reported that experimental VBScript malware PROMPTFLUX queried the Gemini API for obfuscation code and, in one variant, attempted to rewrite its ...
After a summer of sandbox escapes and other newsworthy and confidence-shaking incidents involving its AI models, in a ...