NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
Google Testing Full Desktop Access for Gemini on macOS
A hidden sandbox setting discovered in the Gemini Desktop app suggests Google is building toward giving its AI agent unrestricted file, app,…
Trump Taps DNI Jay Clayton to Head New Federal AI Task Force
The newly formed 'Super Intelligence Force' will coordinate federal AI policy across government, industry, and critical infrastructure, following last week's voluntary AI…
China-Linked TA419 Hits US AI Policy Experts With AitM Phishing
A China-nexus espionage group tracked as TA419 is using adversary-in-the-middle phishing and impersonation of prominent economists, policymakers, and an Anthropic employee to…
ShinyHunters Suspect ‘Rey’ Detained in Jordan, Reportedly Aiding FBI Manhunt
Jordanian authorities reportedly detained Saif al-Din Khader, known online as Rey, who is said to be cooperating with the FBI to identify…
doxx.net Lands $38M to Keep AI Agents Off Malicious Networks
The Miami startup, backed by Andreessen Horowitz, launched its Agentic Defined Networking platform in open beta to give AI agents a private,…
DTU Breach Exposes Data on Up to 200,000 Students, Staff, and Alumni
Denmark's Technical University says attackers used stolen credentials to raid its identity management system, potentially exposing two decades of personal data including…
Dell CSM Flaws Allow Unauthenticated Admin Access, Root on K8s Nodes
Dell has patched critical vulnerabilities in its Container Storage Modules, including a maximum-severity flaw that lets attackers bypass authentication entirely.
GitLab Fixes Critical 9.9 Flaw in Self-Hosted AI Gateway
A critical vulnerability in GitLab's self-hosted AI Gateway could let an authenticated user with Duo Agent Platform access execute commands on the…
Warlock Ransomware Exploits SharePoint Flaws to Hit Water, Telecom, Government Targets
The China-linked Warlock group has breached a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint…
Frontline Education Breach Exposes School District Employee SSNs
Attackers exploited a vulnerability in a third-party software product to access Frontline Education's environment, stealing Social Security numbers and contact details of…
Microsoft’s X Account Hijacked to Push Clippy-Themed Crypto Token
Attackers briefly took over Microsoft's 13-million-follower X account to promote a fake Clippy cryptocurrency, the latest in a string of high-profile account…
Warlock Ransomware Keeps Exploiting SharePoint Flaws in Critical Infrastructure Hits
Symantec reports the China-linked Storm-2603 group behind Warlock ransomware is still weaponizing SharePoint vulnerabilities, hitting water, telecom, government, and university targets across…