In a bold move, 11 high-profile Chief Information Security Officers (CISOs) have opened up about their personal struggles with cybersecurity breaches, revealing a side of the industry that’s often hidden from public view. The CISOs’ candid conversations are part of an 11-episode docuseries called “Declassified,” which aims to raise awareness about the human impact of … Read more
Threat actors have discovered a novel way to trick AI-powered chatbots into revealing sensitive information about their own architecture. Researchers at Varonis Threat Labs found that by manipulating Microsoft Copilot’s natural language processing capabilities, they could get the chatbot to reveal details about its internal workings and even execute malicious code. The technique, dubbed “CoSnitch,” … Read more
China-Linked Hacker Showcases AI Capabilities in Asia-Pacific Attack A sophisticated cyberattack on government agencies in the Asia-Pacific region has sent shockwaves through the cybersecurity community, highlighting the growing threat of near-autonomous attacks enabled by artificial intelligence (AI). The attack, attributed to a Chinese-language operator, used a complex framework involving multiple AI agents to compromise sensitive … Read more
As AI technology continues to advance at breakneck speed, it’s no surprise that its impact on cybersecurity is being felt in every corner of the industry. The latest threat landscape is characterized by AI-powered attacks that can move faster than human defenders, leaving traditional security models struggling to keep pace. To address this issue, a … Read more
A sophisticated cyber threat has been uncovered, operating entirely from Microsoft’s cloud infrastructure and using advanced tactics to evade detection. The malware framework, dubbed “TwinLoot,” leverages various Microsoft services to disguise its activity as legitimate cloud traffic, making it a challenging problem for security professionals. TwinLoot uses a modular approach, employing different Microsoft services for … Read more
**Critical Vulnerability Exposed: CoSnitch Attack Tricks Copilot into Mapping Out Architecture** A sophisticated threat actor can trick a Microsoft Copilot instance into revealing its own security weaknesses, paving the way for a novel prompt injection attack. This is according to new research published by Varonis Threat Labs, which discovered a “meta-hacking” technique that manipulates the … Read more
A Critical GitLab Vulnerability Puts Self-Managed Users in a Tight Spot GitLab’s security team has identified a critical flaw in its software development and DevOps platform, affecting all self-managed versions of its Community Edition (CE) and Enterprise Edition (EE). The bug, designated as CVE-2026-19478, is a code-injection vulnerability that can be exploited by an attacker … Read more
Comcast’s New Xfinity Shield Platform Turns WiFi into Motion Detectors without Cameras or Sensors In a bid to revolutionize home protection, Comcast has integrated WiFi-based motion detection into its new Xfinity Shield platform. This feature, known as WiFi Motion, utilizes the radio signals between Xfinity gateways and stationary devices on the network to detect movement … Read more
A critical security vulnerability in GitLab’s software development and DevOps platform has been discovered, allowing attackers to manipulate or delete publicly accessible projects and user data with ease. The bug, known as CVE-2026-19478, is a code-injection flaw that can be exploited without any authentication or user interaction required. This means that even if an organization … Read more
Comcast’s New Feature Uses WiFi Signals to Detect Home Motion, Raising Concerns About Privacy and Accuracy In a bid to enhance home security, Comcast has announced a new feature that uses WiFi signals to detect motion within homes. Dubbed “WiFi Motion,” this technology is part of the company’s Xfinity Shield platform, which combines cybersecurity, physical … Read more