Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in the production environment at up to 12 bits per second, 360 times the rate of an earlier attack demonstrated in 2021. The end-to-end experiment used an attackerRead More »Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

OpenAI on Tuesday revealed that it paused reinforcement learning (RL) training for its latest artificial intelligence (AI) models for two weeks while it shored up additional defenses and increased the scope of its monitoring to avert another Hugging Face-like incident. “As models become more capable, the risks associated with developingRead More »OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior

The Department of Justice (DOJ) decided last month that TikTok was no longer to be banned from government devices. 

A hacker claimed to have stolen 3.6 million Azure account records from major organizations. Security leaders discuss. 

A previously unreported cyber espionage operation dubbed SilkParasite has been observed targeting government bodies in Central Asia. The intrusion set makes use of seven remote access tool (RAT) families, five of which have never been previously documented: DriveSilkRAT, CookiETagRAT, NomadRAT, GoginRAT, and NodeEdgeRAT. SilkParasite, first discovered in late 2025, isRead More »SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs

Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised more than 14,530 Dahua devices between June 17 and July 22, 2026, using credential attacks, two authentication-bypass flaws, and a peer-to-peer (P2P) relay technique. The activity, codenamed Operation CameraSwarm, was reconstructed from a 407 MB exposedRead More »Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P

Most email defenses still do the job they did a decade ago. Scan the message, look for something malicious, block it. That worked when the danger sat in the payload, a bad link or an attachment. It stopped working when the danger moved into the message’s intent, and it isRead More »Phishing 3.0: The Fight Moves to Agent Versus Agent