Home

OAuth Phishing Campaign Targets Entra ID and Google Workspace

Microsoft has discovered advanced phishing campaigns that misuse the normal behavior of the OAuth 2.0 authentication process. Instead of exploiting software bugs or directly stealing passwords, attackers abuse trusted login [...]

Chrome Introduces Quantum-Safe HTTPS Protection

Google Chrome’s security team has announced a new plan to protect HTTPS from future quantum computer attacks. The new approach uses Merkle Tree Certificates (MTCs), developed through the IETF PLANTS [...]

MS-Agent Flaw Allows Remote Hijacking of AI Agents

A serious security issue has been found in the MS-Agent framework. The flaw, tracked as CVE-2026-2256, allows attackers to take control of AI agents and potentially the entire system they [...]

GTFire Phishing Attack Hides Behind Google Services

GTFire is a newly identified phishing campaign that misuses trusted Google services, including Firebase and Google Translate, to steal user credentials. By hosting phishing content on legitimate Google-owned domains, the [...]

Claude AI Outage Causes Widespread Service Errors

On March 2, 2026, Anthropic’s AI assistant Claude experienced a major global outage that disrupted users and developers worldwide. The incident began around 11:49 UTC, when elevated error rates started [...]

Subscribe to our newsletter to receive security tips everday!