Bank of America is warning customers against sharing banking credentials with AI agents. I was getting ready to make a joke about this when it occurred to me that the warning is less obvious than it should be. Continue Reading →
Cyber Security
Posts about Cyber Security.
Subscribe to my newsletter to make sure you don't miss anything.
PHP2Shell research offers a preview of an AI apocalypse: attackers running code on affected web servers without a password. The number of servers still exposed is unknown. Continue Reading →
OpenAI disclosed that its models escaped a cybersecurity evaluation environment and compromised Hugging Face’s production infrastructure. The models were supposed to solve a test inside a locked room. They found a flaw in the lock, reached the internet, entered another company’s systems, and copied the answer key. Continue Reading →
Hackers are actively exploiting two vulnerabilities in WordPress core. Used together, the flaws can let an unauthenticated attacker take full control of a website. WordPress released emergency fixes on July 17, but Patchstack says it is observing attacks on sites that have not been updated. Continue Reading →
U.K. prime minister Keir Starmer announced Monday that the United Kingdom will ban social media for everyone under sixteen, naming Snapchat, TikTok, YouTube, Instagram, Facebook, and X. The British government says it will go further than any other country's ban, with implementation targeted for next spring. Continue Reading →
Researchers at X41 D-Sec disclosed "BadHost," a critical vulnerability in Starlette, the open-source Python framework embedded into roughly 325 million new software builds every week. If your enterprise has stood up an AI agent in the last 18 months, some part of the stack runs on Starlette. Continue Reading →
Anthropic announced that it built a model so capable at finding and exploiting software vulnerabilities that it will not release the model to the public. Continue Reading →
CES® 2026 opens in nine days, and for the thirteenth year, the Shelly Palmer Innovation Series Breakfast will bring together C-suite executives from the world's most influential media, marketing, and technology companies. Continue Reading →
Thanksgiving always kicks off the annual flood of promo emails, shipping alerts, loyalty offers, holiday coupons, and "exclusive VIP deals." This year, the volume feels higher and the quality feels sharper because AI tools now generate phishing emails that look exactly like what Amazon, Walmart, Wayfair, UPS, FedEx, or any major brand would send. The old visual tells are gone. The scams and their associated scam websites are practically indistinguishable from legitimate ones. Continue Reading →
Microsoft is officially going passwordless by default. On the surface, it’s a welcome step toward a safer, simpler future. Passkeys — supported by Apple, Google, and Microsoft under the FIDO Alliance banner — promise to eliminate the phishing risks, credential leaks, and attack vectors that passwords have always invited. But there’s a catch. Continue Reading →