NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
Streaming Responses for Better AI App UX
Streaming turns a slow, silent wait into a fast, responsive experience. Here is why it matters and how to implement it cleanly…
Progress Kemp LoadMaster Pre-Auth RCE Flaw Under Active Exploitation
A critical OS command injection vulnerability in Progress Kemp LoadMaster is being actively targeted, with exploitation attempts identified by eSentire's Threat Response…
Critical Cursor AI Editor Flaws Allow Prompt Injection to Escape Sandbox
Two near-perfect-severity vulnerabilities in the Cursor AI code editor, dubbed DuneSlide, can be triggered by a single malicious prompt to break out…
Ousaban Banking Trojan Targets Iberian Bank Users via Fake PDF Lures
A Brazilian banking trojan is running a geo-filtered phishing campaign against Windows users in Spain and Portugal, using fake corrupted PDFs and…
Password-Spraying Campaign Hits Microsoft 365 with 81M Login Attempts
A two-week campaign exploiting the ROPC OAuth flow bypassed MFA controls across dozens of organizations, compromising 78 Microsoft 365 accounts at 64…
DHS Confirms Breach of HSIN Sensitive Information-Sharing Platform
An unknown threat actor compromised the Homeland Security Information Network between late May and early June, targeting servers and a SharePoint collaboration…
SEO-Poisoned Sites Abuse ScreenConnect to Drop AsyncRAT
Kaspersky has identified a large-scale campaign using fake software download sites and ScreenConnect to deliver the AsyncRAT remote access trojan to unsuspecting…
Opera Adds Paste Protect to Block ClickFix Clipboard Attacks
Opera's new Paste Protect feature intercepts malicious commands before they reach the clipboard, offering browser-level defense against the increasingly popular ClickFix social…
Trump Administration Lifts Claude Restrictions After Safeguard Bypass Discovery
The Commerce Department has ended its ban on Anthropic's latest AI models following weeks of restrictions tied to a researcher-discovered method for…
ToddyCat Group Deploys Umbrij Malware to Hijack Gmail via Google API
The ToddyCat threat actor has been linked to a new malware family called Umbrij that abuses OAuth and the Google API to…
Claude Fable Returns to Users, But Aggressive Safety Filters Draw Complaints
Anthropic has made Claude Fable 5 broadly available after a Commerce Department export ban was lifted, but users report the model is…
Using AI Coding Agents Safely in Production Codebases
A practical playbook for letting autonomous coding agents modify real code: sandboxing, review gates, permission scoping, and the guardrails that keep automation…