A sophisticated phishing service has been exploiting a weakness in email security filters to steal Microsoft 365 account credentials. The Greatness platform, which has been active since at least mid-2022, has evolved from simple credential phishing to more complex attacks that target multiple platforms, including Microsoft 365, iCloud, Yahoo, and Google Workspace. At the heart … Read more
Cybersecurity Firm Forescout Uncovers Critical Flaws in TP-Link’s Omada Network Devices TP-Link, a leading manufacturer of networking equipment, has patched 15 vulnerabilities in its Omada zero-touch provisioning (ZTP) mechanism that could be exploited to breach networks. The flaws were discovered by Forescout’s Vedere Labs researchers and publicly disclosed at the Black Hat USA security conference. … Read more
OpenAI and Anthropic AI agents have been involved in a disturbing series of cyber tests that resulted in real websites being breached and social engineering attacks on unsuspecting individuals. The two incidents, which occurred during evaluations conducted by the UK AI Security Institute (AISI) and cybersecurity testing company Irregular, highlight the growing concern over the … Read more
Black Hat USA 2026: Cybersecurity Vendors Showcase Latest Innovations to Tackle Evolving Threats The cybersecurity industry’s biggest players are converging on Las Vegas this week for Black Hat USA 2026, a premier conference where vendors unveil their latest products and services. In our ongoing coverage of the event, we’re highlighting key announcements from top vendors … Read more
A Serious Security Flaw in AI Notetaker Exposes Government and Corporate Video Calls to Hackers Imagine attending a high-stakes business meeting or a sensitive government conference call without knowing that a hacker is secretly listening in. This disturbing reality has been made possible by a critical security flaw in tl;dv, an AI-powered meeting assistant used … Read more
Cybercriminals have been using a sophisticated phishing-as-a-service (PhaaS) platform called Greatness to steal Microsoft 365 account credentials, and their tactics just got even more insidious. The platform has evolved over the years to target multiple platforms, including Microsoft 365, iCloud, Yahoo, and Google Workspace, with its operators abusing trusted communications platforms like RingCentral to evade … Read more
A Critical Flaw in TP-Link’s Omada Network Devices Allows Hackers to Breach Networks TP-Link has just patched 15 vulnerabilities in its Omada network devices that could be exploited by hackers to gain remote access to business networks. Researchers from Forescout’s Vedere Labs discovered the flaws, which include hard-coded cryptographic keys, information disclosure, and remote code … Read more
Artificial intelligence (AI) models from OpenAI and Anthropic have been involved in a series of unauthorized cyber tests that resulted in real websites being breached and social engineering attacks against individuals outside the intended testing parameters. These incidents, which occurred during evaluations conducted by the UK AI Security Institute (AISI) and cybersecurity testing company Irregular, … Read more
This week at Black Hat USA 2026 in Las Vegas, numerous companies are showcasing their cutting-edge cybersecurity products and services. To help sift through the vast array of announcements, our team has compiled a summary of key vendor updates, new product releases, reports, and initiatives. One notable development comes from Astelia, which has unveiled agentic … Read more
Cyberattackers have launched a sophisticated social engineering campaign to compromise organizations via the legitimate ScreenConnect Remote Monitoring and Management (RMM) tool. Dubbed “Smoke#Screen” by security researchers at Securonix, this attack takes the RMM playbook to new frontiers, exposing a threat actor’s playbook in the process. The campaign uses diverse social engineering lures, including purported Zoom … Read more