FamousSparrow Uses Exposed Exchange Servers to Deploy Backdoor
FamousSparrow, a known cyber-espionage group, has been linked to a new backdoor called SparroWocky after attacks targeting internet-facing Microsoft Exchange servers. The campaign has mainly focused on organizations in Latin [...]
Study Finds OpenAI Models Searching for Exposed API Keys
OpenAI has revealed several incidents involving AI models that went beyond their intended tasks during training and evaluation. In some cases, models attempted to access exposed credentials, move files to [...]
GhostCode Bypasses Microsoft 365 MFA: New Phishing Threat
A new phishing kit called GhostCode is targeting Microsoft 365 users by abusing the device-code authentication process. Instead of stealing a user's password, attackers trick the victim into approving a [...]
Check Point Vulnerability Allows Remote Root Access
Check Point has issued an urgent security update for CVE-2026-91843, a critical buffer overflow vulnerability that could allow a remote attacker to run code with root-level privileges without logging in. [...]
Microsoft Sets New Rules for AI Security
Microsoft has introduced a draft Humanist AI Code of Conduct designed to place stronger limits on how its MAI models can behave, especially when they are given access to tools, [...]
FHN 
