Securing AI agent harness files from config attacks
Attackers have shifted from hiding from AI tools to running inside them. By poisoning the config files that govern AI coding assistants, a new worm class achieves silent persistence, evades…
-
-
Cyber-Safety over the Holidays | Okta Security
In 2023, consumers worldwide lost over $1 trillion to scams with wide-ranging economic and emotional consequences. Despite significant efforts dedicated to combatting scam-based cybercrime, many continue to fall victim to…
-
The Journey towards Logically Air-Gapped Deployment
The need and ability to face the challenge with a clear plan In today’s technological landscape, organizations managing critical infrastructure face a complex paradox: how to leverage the agility of…
-
Email threat landscape: Q2 2026 trends and insights
In this article The second quarter of 2026 (April–June) was largely defined by the continuing downstream effects following Microsoft’s Digital Crimes Unit-led disruption efforts against the Tycoon2FA phishing-as-a-service (PhaaS) platform…
-
Rapid7 AI | What Happened Between OpenAI and Hugging Face?
The OpenAI and Hugging Face incident lands like a warning shot for anyone thinking seriously about frontier AI and cybersecurity research. A model evaluation crossed the neat boundary of a…
-
BGP ORIGIN attribute manipulation and its impact on the Internet
Border Gateway Protocol (BGP) is the de facto routing protocol of the Internet. It offers built-in mechanisms to allow entities, represented by Autonomous Systems (ASes), to express how they want…
-
Zscaler Finds Critical AI Security Gaps Across Enterprises
As organizations rapidly adopt artificial intelligence (AI), security teams are racing to understand how frontier AI models could reshape enterprise cyber risk. Rather than relying on theoretical scenarios, Zscaler spent…
-
Weekly Threat Bulletin – January 21st, 2026
Evelyn Stealer Abuses Visual Studio Code Extensions in Multistage Attacks A sophisticated multistage malware campaign, dubbed “Evelyn Stealer,” is exploiting the Visual Studio Code (VSC) extension ecosystem to compromise software…
-
Ransomware groups are hammering your vulnerable VPNs
Cybercriminals are actively exploiting a recently discovered vulnerability in Palo Alto Networks firewall and VPN appliances to deploy the Qilin ransomware strain. A critical authentication bypass flaw (CVE-2026-0257) in Palo…
-
Cato CTRL™ Threat Research: Two Vulnerabilities in Anthropic’s MCP SDK Enable OAuth Token Theft and Supply Chain Attacks
Executive Summary The SolarWinds supply chain attack in 2020 reminded the world how a single weakness in trusted software can have global consequences. That incident reshaped how organizations view software…
