Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.

My local LLM can access my emails easily, and without flooding the context window.

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...

Indirect prompt injection attacks are now draining cryptocurrency from AI agents in production. Zscaler ThreatLabz documented ...