Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...

OpenAI has launched ChatGPT Work, a GPT-5.6-powered agent that acts across your apps and files, runs scheduled tasks, and can stay with a project for hours.

Indirect prompt injection attacks are now draining cryptocurrency from AI agents in production. Zscaler ThreatLabz documented ...