New Helix extortion group steals SharePoint data after compromising Microsoft 365 accounts through voice phishing and MFA ...

ACR Stealer campaigns use ClickFix lures, JPEG steganography, and WebDAV to steal browser tokens, passwords, PDFs, and synced ...

Microsoft is extending Dataverse into coding-agent marketplaces while expanding its MCP tools, certification program and governance controls.

A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code ...

Threat actors are exploiting CVE-2026-58644, a Microsoft SharePoint RCE vulnerability patched on the July 2026 Patch Tuesday.

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

Eating its prey can be a process for a python, which is why it relies so heavily on its jaw to get the job done, including consuming a whole deer.

A new malicious framework called OkoBot is delivering more than 20 payloads in attacks focused on stealing cryptocurrency ...

Leaked source code reveals how AI music company Suno actually assembled substantial portions of its training library.

Microsoft MSFT0.19%increase; up pointing triangle, Google and Amazon AMZN-0.69%decrease; down pointing triangle are among the tech companies spending an estimated $1 trillion on AI infrastructure this ...

In other news, a DHS database was hacked, Adobe is releasing patches twice a month, and Canada has disrupted ransomware operations.

A recently identified but accidentally unpublicised remote code execution (RCE) flaw in Microsoft SharePoint, tracked as CVE-2026-45659, has been added to the US Cybersecurity and Infrastructure ...