ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...

CISA: Microsoft SharePoint RCE flaw now actively exploited

CISA warned on Wednesday that attackers have begun exploiting a high-severity Microsoft SharePoint remote code execution ...
SecurityWeek

‘BioShocking’ Attack Tricks AI Browsers Into Stealing Credentials

The BioShocking technique exploits AI browser reasoning, showing how easily attackers can subvert safety guardrails with ...

Opera is releasing a new feature that detects and blocks malicious clipboard content

If you tend to copy/paste content from websites, you might be surprised to find yourself under the thrall of a ClickFix ...
SecurityWeek

Adobe Patches Critical ColdFusion, Campaign Classic Vulnerabilities

Adobe issued June 2026 security updates for ColdFusion and Campaign Classic to resolve half a dozen maximum severity vulnerabilities.
Unite.AI

DeepKeep Uncovers ‘InkJect,’ a New AI Attack That Hides Malicious Prompts Inside Images

As enterprises rapidly embrace multimodal AI capable of understanding both text and images, security researchers are discovering that these powerful new capabilities introduce equally sophisticated ...
CSO Online

Sandbox bypass flaws in Cursor IDE highlight prompt injection as an RCE vector

Researchers have discovered two vulnerabilities in the widely used Cursor AI-enabled integrated development environment (IDE) ...