NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
Amazon Fined $2.25M for Blocking Identity Theft Victims’ Transaction Records
The FTC says Amazon repeatedly denied fraud victims and law enforcement access to transaction records required by federal law, citing bogus privacy…
Six Questions to Pressure-Test Vendor Claims Around Frontier AI
As security vendors race to tout Frontier AI capabilities, enterprises need a sharper framework for separating genuine investment from marketing noise. A…
ARToken: Inside the EvilTokens Affiliate Panel Targeting Microsoft 365
Cisco Talos has dissected ARToken, a phishing-as-a-service panel linked to EvilTokens that abuses Microsoft OAuth device code flows to bypass MFA and…
Hardening AI-Generated Code Before It Ships
AI can write code faster than most humans can review it. This guide gives you a practical checklist for auditing, testing, and…
Fake Perplexity AI Extension Intercepted Search Queries via Chrome Web Store
A malicious Chrome extension impersonating Perplexity AI quietly rerouted all browser search queries through attacker-controlled infrastructure, Microsoft Threat Intelligence researchers found.
Langflow RCE Flaw Exploited to Drop Monero Miner on AI Endpoints
Attackers are actively exploiting a critical unauthenticated remote code execution vulnerability in Langflow to deploy Monero cryptocurrency mining malware on exposed AI…
Poisoned MCP Tool Descriptions Can Turn AI Agents Into Data Exfiltration Tools
New Microsoft research demonstrates how attackers can manipulate AI agents into leaking sensitive company data by embedding malicious instructions inside tool descriptions,…
CIA Director Ratcliffe Outlines Aggressive Tech Overhaul at AWS Summit
CIA Director John Ratcliffe described sweeping organizational and procurement changes at the agency, framing frontier AI as a strategic imperative comparable in…
Trojanized Pyrogram Forks on PyPI Hand Attackers Full Control of Telegram Bots
A campaign tracked as Operation Navy Ghost has distributed at least eight malicious PyPI packages since November 2025, embedding a hidden backdoor…
Microsoft Sets 2029 Deadline for Quantum-Safe Cryptography Across Critical Services
Microsoft is accelerating its post-quantum cryptography transition, citing a narrowing window before cryptographically relevant quantum computers could arrive. The company now targets…
BioShocking Attack Tricks AI Browsers Into Bypassing Safety Guardrails
Researchers at LayerX demonstrated a prompt injection technique that uses a fictional game scenario to convince AI-powered browsers to exfiltrate sensitive data,…
Anthropic Launches Claude Sonnet 5 with Agentic Gains at a Lower Price
Anthropic's new Claude Sonnet 5 brings flagship-class agentic capabilities to a cheaper tier, narrowing the gap with Opus 4.8 while undercutting it…