Upwind just dropped a new product announcement today, and it signals a fundamental shift in how the company thinks about AI risk. CEO Amiram Shachar published a lengthy post this morning laying out Upwind’s “Security for AI” thesis, the companion piece…
A new attack technique affects HTTP/2 configurations of major web servers, but some have released patches already.
ATG owners are urged to tighten up on security and keep track of potential attacks.
Code reviewed by WIRED uncovered an unreleased face-recognition system embedded in Meta’s smart glasses platform. It’s designed to identify people via biometric data stored on users’ phones.
The attack starts with a GitHub issue. Not a sophisticated one. Just an issue opened by a bot account with a carefully worded body that looks like an error message. When Claude Code’s GitHub Action picks it up for triage, it follows the instructions hi…
Prompt injection works on Android notifications, as well, and could have been used for a myriad of things.
The advisory warns that Chinese spies are using public job search platforms to recruit people with access to non-public information.
More than a year after Belgian prosecutors asked the European Parliament to lift the immunity of four lawmakers suspected of taking bribes from Huawei lobbyists, the Parliament has voted to keep those protections in place, Politico reported. The decisi…
China is using fake organizations to pay for intelligence reports, with higher payments for more secrets.
The FBI arrested 63 people in connection to the scam network, while Microsoft disabled 20,000 accounts.