Threat

Employers are being urged to connect identity, payment and device checks as North Korean remote-work schemes expand their use of human stand-ins.

Anthropic reports that Claude supported live Russian-linked intrusions, while separate and uncorroborated campaigns allegedly extracted model capabilities at scale.

Apple reportedly caps concurrently open bounty reports while allowing quota requests, as its guidelines classify unvalidated AI-generated findings as ineligible.

Three US lawmakers have asked Commerce to add named India-based companies to the Entity List. No listing action had been identified by the evidence cutoff.

CISA guidance puts July’s target count above 100 internet-exposed US water-sector systems, while the number of successful intrusions remains undisclosed.

The return of 3,400 BTC reduced the funds remaining at the actor-controlled address, but Liquid’s incident and public bridge outage were still active.

Microsoft has released one of its largest monthly security updates, fixing 421 vulnerabilities across Windows, Office, SharePoint, Exchange, Azure and

Security researchers say they developed a working attack against Zoom in less than 24 hours, using fewer than 20 prompts