Researchers have identified new characters that can be used by malicious actors to create domain names that appear legitimate in web browsers, potentially leading to phishing and credential theft.
Hackers are employing a sophisticated technique called "Adception" to distribute malware by abusing legitimate Bing search-result redirects within Google search ads.
A security vulnerability in Amazon Bedrock AgentCore, discovered by Zenity Labs researchers, could allow attackers to steal temporary credentials and access source code of AI agents.
A pre-authentication remote code execution flaw in AnyDesk for Linux has been fully exploited, allowing attackers to gain root access without user approval.
Threat actors are actively exploiting two vulnerabilities, one critical and one medium-severity, in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners.
Microsoft announced significant advancements in its AI strategy, focusing on enhancing the security of Windows devices for AI agents and introducing new capabilities for its Copilot AI assistant.
Microsoft announced that devices running unsupported versions of Windows will cease to receive security updates after the rotation of Windows Update certificates in 2027.