Prompt injection is becoming the XSS of the web agent era
Autonomous web agents read whatever a page displays, and much of that content comes from strangers. Product reviews, seller listings, […]
Zhuoying Chen +1 Charged In Chinese Money Laundering Case
U.S. authorities have charged two New York residents, including Zhuoying Chen, in connection with an alleged Chinese money laundering network accused of laundering
Hotel Cybersecurity: A Practical Threat Playbook for Hospitality (2026)
Threat actors are targeting hotel staff with booking-related phishing emails and the ClickFix social engineering technique. These phishing campaigns are
Jay Clayton pressed on 2020 election at DNI nomination hearing
Democratic senators pressed President Donald Trump’s pick for director of national intelligence on questions of election security and integrity Wednesday,
Ukrainians rally against dismissal of tech-minded defense minister Fedorov
Ukrainians took to the streets across the country on Thursday to protest President Volodymyr Zelensky’s abrupt dismissal of Defense Minister
Hackers find a new trick to collect Microsoft Entra user data without raising red flags
Dive Brief: Businesses should be on guard for a hacking campaign in which attackers spoof OAuth client IDs to collect
Your Vision. Your Legacy. Your Future.
This month, we celebrate 36 years of EFF and a mission that is bigger than any one of us. Thanks
23andMe Faces New Security Mandates in $18m Data Breach Settlement
A settlement of $18m has been reached between a coalition of 42 US attorneys general and genetic testing firm 23andMe
The quest for greater tech independence
The Trump administration’s shift in tone and approach toward traditional allies has understandably unsettled many nations, raising doubts about U.S.
Prioritizing Vulnerabilities with Attacker Behavior Signals
As of April 15, 2026, NIST enriches only CVEs that appear in the CISA Known Exploited Vulnerabilities catalog, federal government