The European password manager Passwork is developed by Russian founders, shares identical source code with a Russian variant certified by Russian security authorities, and supplies sanctioned defense contractors.
ACR Stealer infects enterprise customers through fake error messages with manipulated commands and steals browser data, credentials, and cloud content.
EY customers exposed their tax documents between March and April 2026 through a compromised support ticketing access point, with the exact number of affected customers remaining unclear.
Fraunhofer is developing person-centric voice profiles to detect audio deepfakes as general detection methods can no longer keep pace with rising synthesis quality.
AI-accelerated vulnerability discovery reveals decades of accumulated technical security debt at a pace that could overwhelm SOC teams through cognitive overload.
Claude Mythos identifies critical security gaps at scale – Anthropic limits access through Project Glasswing and offers a guardrailed parallel model called Claude Fable 5.
GPT-5.6 incorrectly deletes the $HOME environment variable instead of a temporary directory when operating in full-access mode without sandbox protection, prompting OpenAI to announce technical safeguards.
Phishing emails with fake compliance notifications attempt to lure LastPass and Bitwarden users to malicious websites to steal master passwords or distribute malware.
