In the early hours of September 25, 2026, the server logs for the site we operate showed a clear change in how OpenAI's ...

Last time, I prepared and published five pages with coined terms to verify what AI crawlers can and cannot read. Four weeks ...

A critical attack path in OpenCode, the open-source AI coding agent, could allow a malicious website to execute commands on a ...

Asymmetric Security's follow-up probe into activity tied to OpenAI's agents examines a chain of external browser and ...

Malicious Terraform providers and Go modules deliver Graphalgo-linked Go malware using blockchain and Slack for command and ...

TIKTOUK targets exposed WordPress backups to steal cloud and email credentials, with 50,000 credentials found across 37,000 domains.

Exploiting Unauthenticated API Gateways in AWS September 21, 2026 sara.pearlman@guidepointsecurity.com BLOG  5 min. Over the past year, GuidePoint’s Threat and Attack Simulation (TAS) team has ...

KREMLIN targets Brazilian bank users with malicious Chrome and Edge extensions that steal credentials, session tokens, cookies, and browser data.

Nonprofit research organization Transluce published a report on September 23 analyzing 37,649 public records from the URL ...

FBI, BND and Japan's NPA name WaterPlum: 30,000 infected machines, 7,000 drained wallets. Spot the fake job offer and protect ...

Your team built a working application in three weeks using Cursor, Lovable, Replit, Bolt, or Claude Code. The demo impressed investors. The pilot customer is ready to sign. And now someone in the room ...

Chainalysis says North Korea and Iran now drive much of the growth in blockchain dead drops as attacks become harder to dismantle.