Confusion reigns as phishers abuse Exchange Online Direct Send
Legitimate feature needs to be secured, but admins aren’t sure how to do it.
“ReVault” firmware flaws allow persistent access in Dell laptops
Over 100 currently supported models at risk.
NSW greenlights central database for compromised IDs
Identity Protection and Recovery Bill passes NSW Parliament
Cloudflare and Perplexity slug it out over alleged AI bot block evasion
Block-busting bot or legitimate AI traffic?
AI coding threatens to make common security flaw more prevalent
IDORs and broken access controls at scale.
Google publishes 20 new vulnerabilities found by its Big Sleep AI
After large-scale run of the agent.
Google’s Project Zero to make faster vulnerability announcements
Uses soft power to shrink ‘upstream patch gap’.
Russia’s FSB conducts ISP-level cyber espionage, Microsoft says
Targets foreign embassies in Moscow.
Nvidia says its chips have no ‘backdoors’
After China flags H20 security concerns.
New account hijacking defences for Google Workspace and Chrome
Expanded passkey support, anti-cookie thievery and security signals betas launched.