Microsoft

Inside Tycoon2FA: How a leading AiTM phishing kit operated at scale

Tycoon2FA has become a leading phishing-as-a-service (PhaaS) platforms, enabling campaigns that reach over 500,000 ...
Cybernews

AI agents are too easy to fool, with websites now littered with hidden “system override ...

Researchers at Unit 42, a security arm of Palo Alto Networks, have documented real-world attacks, and they’re as dumb as it gets. Hidden text on websites simply asks AI to “ignore previous ...
InfoWorld

Three web security blind spots in mobile DevSecOps pipelines

Mobile platforms operate under fundamentally different trust assumptions than we relied on for web security. Your mobile ...
WIRED.jp

Google検索で「AIによる概要」を表示させない方法

Google 検索で、ウェブページのリンクをAIが要約した表示を見たくないなら、クエリの末尾に「-ai」と入力すればよい（クエリと「-ai」の間には半角スペースが入っている）。この方法は、グーグルのAI Overviewsを悪用した詐欺について扱った ...
SecurityWeek

GitHub Issues Abused in Copilot Attack Leading to Repository Takeover

Orca has discovered a supply chain attack that abuses GitHub Issue to take over Copilot when launching a Codespace from that ...