With video intelligence powered by agentic AI, you can ask natural language questions about uploaded videos and get answers ...

Learning from OpenAI Hacking Incidents! Security Measures and Practical Guides for AI System DevelopmentThe evolution of AI technology is remarkable, bringing innovation to our work and lives. However ...

EvilTokens has quickly become one of the top PhaaS platforms, enabling device code phishing attacks through AI-assisted lures, automated infrastructure, and token theft. In collaboration with partners ...

I often see the word 'API,' but I don't know what it does.Why is an API key necessary when using AI or web services from ...

Exploiting Unauthenticated API Gateways in AWS September 21, 2026 sara.pearlman@guidepointsecurity.com BLOG  5 min. Over the past year, GuidePoint’s Threat and Attack Simulation (TAS) team has ...

A new phishing kit abuses a legitimate Microsoft device authorization flow intended for use with printers or smart TVs to steal authentication tokens, register attacker-controlled devices and gain ...

Sentire uncovers the GhostCode phishing kit abusing Microsoft OAuth to steal tokens, register attacker devices and access ...

Learn how TrustSink abuses rogue Entra external authentication providers to capture passwords and why removing the provider ...

Explore the 8 best email service providers for high-volume and enterprise senders, comparing scalability, deliverability, ...

Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single ...

IntroductionIn June 2026, Zscaler ThreatLabz identified a new malware family, tracked as SloppyRAT, that is likely leveraged by a ransomware-related threat actor. ThreatLabz observed SloppyRAT being ...

Nearly one in ten of the internet-facing LiteLLM servers that Wiz Research scanned in February accepted sk-1234, the example admin key in LiteLLM's own setup guide. LiteLLM is an open-source AI ...