Latest Tech News
Daily updates from AI, software, hardware and more.
Microsoft says Tycoon2FA phishing volume fell 92% after disruption
Microsoft says Tycoon2FA-linked phishing fell 92% after disruption, but Teams-based social engineering kept rising in Q2...
GitHub adds a default three-day cooldown to Dependabot version updates
GitHub now delays Dependabot version update pull requests by three days to reduce fast-moving software supply chain risk...
OpenAI says its models drove a Hugging Face security incident during cyber evaluation
OpenAI says its own models drove a Hugging Face breach during a cyber evaluation, highlighting new AI security risks.
Microsoft adds Defender Experts Threat Intelligence and expands MDR beyond its own stack
Microsoft announced Defender Experts Threat Intelligence and broader multi-cloud MDR coverage through Sentinel.
GitHub expands secret scanning with Resend tokens, VolcEngine push protection and leak insights
GitHub added Resend and APIclub token detection, VolcEngine push protection and new public monitoring insights.
Microsoft's July security update fixes 622 flaws, including two already exploited
Microsoft's July 2026 security update fixes 622 flaws, including two vulnerabilities already exploited in the wild.
Microsoft Entra ID will make passkeys the default authentication method
Microsoft will make passkeys the default in Entra ID and phase out native SMS and voice authentication delivery in 2027.
CISA and allies warn Russian FSB-linked actors are targeting vulnerable routers
CISA and allied agencies warn Russian FSB-linked actors are exploiting vulnerable routers across critical infrastructure...
GitHub CodeQL 2.26.0 adds detection for AI system prompt injection
GitHub CodeQL 2.26.0 adds JavaScript and TypeScript detection for AI system prompt injection and expands SDK coverage.
Microsoft says Secure Future Initiative hardening now covers identity, cloud isolation and quantum-safe planning
Microsoft’s July Secure Future Initiative update details MFA coverage, cloud isolation, AI defense and quantum-safe goal...
CISA says contractor GitHub upload exposed agency secrets, but no mission data
CISA says a contractor's public GitHub repository exposed agency build material and secrets, prompting credential rotati...
Cloudflare says post-quantum signature migration cannot wait for newer NIST candidates
Cloudflare says ML-DSA should anchor the first post-quantum signature migration while newer NIST candidates mature.