Attention: You are using an outdated browser, device or you do not have the latest version of JavaScript downloaded and so this website may not work as expected. Please download the latest software or switch device to avoid further issues.
| 8 May 2026 | |
| Written by Gabi Gerber | |
| Attacks & Threats |
An attacker with administrative privileges can gain access to Microsoft Edge user passwords even when they're not in use, because the browser stores them in cleartext in process memory as part of a design decision by Microsoft.
Security researcher Tom Jøran Sønstebyseter Rønning revealed the issue and how it can be exploited in a proof-of-concept (PoC) tool at Palo Alto Networks Norway's BIG Bite of Tech conference last week. He subsequently posted resources for the PoC and tool on GitHub. More here
Ernst & Young has begun notifying clients of a data breach after an attacker compromised a third-party support platform and downloaded documents containing personal and financial i… More...
A cryptomining incident highlights how AI gateways can provide access to AI models, cloud infrastructure, and identity a… More...
Microsoft signed a malicious kernel driver, and now it's being used to kill security software in ransomware attacks. More...
Two new models from Chinese firms compete with top US mainstream and frontier models. Should cyber-defenders be worried? More...
An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and enc… More...
Ernst & Young has begun notifying clients of a data breach after an attacker compromised a third-party support platform and downloaded documents containing personal and financial i… More...
A cryptomining incident highlights how AI gateways can provide access to AI models, cloud infrastructure, and identity a… More...
Microsoft signed a malicious kernel driver, and now it's being used to kill security software in ransomware attacks. More...
Two new models from Chinese firms compete with top US mainstream and frontier models. Should cyber-defenders be worried? More...
An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and enc… More...
