Breaking Lab srl
A massive Chrome update fixes 327 security flaws, some of which can be triggered just by visiting a webpage. If you haven't updated your browser yet, here's why you should do it before your next browsing session.
Attackers are impersonating IT support staff inside Microsoft Teams to trick employees into installing backdoor software. Here is what to watch for and how to stay safe.
Two thousand compromised WordPress sites were secretly used to spread malware, control infected devices, and store stolen data. If you run a WordPress site, here is what this means for you.
Researchers found 41 sites that display a legitimate-looking URL but quietly redirect you to a malicious file. The usual checks — verified links and digital signatures — are no longer enough.
Some Geekom mini-PCs shipped with a malicious file hidden inside a network driver, capable of stealing passwords and logging keystrokes. If you own one, you need to act now.
A developer discovered his Google Doc full of company passwords had been indexed by Google Search. Here's why this happens and what to do instead.
Three flaws in Microsoft Copilot Personal let a single crafted link silently pull data from connected apps. Here's what that means for anyone who links Copilot to their email, calendar, or files.
Researchers from Anthropic and EPFL have demonstrated self-propagating payloads that jump from one AI agent to another through editable system prompt files. The findings expose a new class of security threat unique to multi-agent AI architectures.
Amazon has been acquiring and destroying rare, out-of-circulation texts to extract training data for its large language models. The practice raises urgent questions about the irreversible loss of cultural heritage in the race to build smarter AI.
SpaceX has formally completed its acquisition of Cursor, the AI-powered coding assistant that became a favorite among developers. The deal marks a surprising strategic pivot for Elon Musk's rocket company into software tooling.
Anthropic researchers set multiple AI agents on the same task and discovered they can clash, collude, and coordinate in ways that current safety frameworks never anticipated. The findings raise urgent questions about multi-agent AI deployments.
A newly disclosed vulnerability in how OpenAI, Anthropic, and Google handle encrypted reasoning objects allowed researchers to recover internal secrets—including API keys and passwords—by replaying reasoning blocks across sessions.
