Security Bulletin

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Precursor operates within the user's browser, streaming interaction signals to Cloudflare's edge servers for real-time analysis.

Security researchers at Varonis discovered flaws in Google Cloud's Dialogflow CX, a platform used for building chatbots.

The "Breach at the Beach" CTF, created by Varonis researchers Doron Kapah and Mark Vaitsman, simulates attacks within Entra ID, focusing on how threat actors exploit legitimate features, particularly non-human identities like AI agents and service...

The proposed regulations stem from a report by a panel of experts convened to address the harms associated with social media.

The attack, which occurred in December 2025, targeted Poland's power grid with the intent to disrupt communication between renewable energy hardware and power distribution operators.

Apple alleges that former employee Chang Liu, who left the company to join OpenAI's hardware team, downloaded "dozens" of top-secret hardware files.

The decision by the LAPD, one of Flock's largest government clients, follows similar moves by other major U.S. cities like Mountain View, California, and South Portland, Maine, which also cited privacy worries and potential misuse of data by federal...

The compromised data includes customer salutations, first and last names, phone numbers, email addresses, dates of birth, and customer numbers.

The technique involves attackers issuing POST requests to Microsoft's OAuth 2.0 token endpoint using the Resource Owner Password Credentials (ROPC) flow.

The breach was discovered after mass emails were sent from legitimate AFA domains, claiming Argentina "stole" the win from Egypt.