Zscaler data breach exposes customer info after Salesloft Drift compromise
Cybersecurity company Zscaler warns it suffered a data breach after threat actors gained access to its Salesforce instance and stole customer information, including the contents of support cases. This warning follows the compromise of Salesloft Drift, an AI chat agent that integrates with Salesforce, in which attackers stole OAuth and refresh tokens, enabling them to gain access […]
Amazon disrupts Russian APT29 hackers targeting Microsoft 365
Researchers have disrupted an operation attributed to the Russian state-sponsored threat group Midnight Blizzard, which sought access to Microsoft 365 accounts and data. Also known as APT29, the hacker group compromised websites in a watering hole campaign to redirect selected targets “to malicious infrastructure designed to trick users into authorizing attacker-controlled devices through Microsoft’s device code […]
Brokewell Android malware delivered through fake TradingView ads
Cybercriminals are abusing Meta’s advertising platforms with fake offers of a free TradingView Premium app that spreads the Brokewell malware for Android. The campaign targets cryptocurrency assets and has been running since at least July 22nd through an estimated 75 localized ads. Brokewell has been around since early 2024 and features a broad set of capabilities that […]
OpenAI releases big upgrade for ChatGPT Codex for agentic coding
OpenAI has announced a big update for Codex, which is the company’s agentic coding tool. The changes include new VS Code extension, sync support between web and terminal, and more. If you’ve a Plus or Pro subscription, you can now use Codex with every build, and it doesn’t matter where you use Codex. It now also works […]
Anthropic is testing GPT Codex-like Claude Code web app
Anthropic is planning to bring the famous Claude Code to the web, and it might be similar to ChatGPT Codex, but you’ll need GitHub to get started. For those unaware, Claude Code, which works with paid plans, is an AI-powered coding assistant that runs inside your terminal. It is primarily designed for developers, and it can understand […]
ChatGPT can now create flashcards quiz on any topic
If you use ChatGPT to learn new topics, you might want to try its new flashcard-based quiz feature, which can help you evaluate your progress. I used a simple prompt: “Turn financial econometrics into a clean GPT flashcard quiz.” In this case, I’m trying to learn Financial Econometrics, which is all about applying statistical methods to financial market […]
OpenAI is testing “Thinking effort” for ChatGPT
OpenAI is working on a new feature called the Thinking effort picker for ChatGPT. With the Thinking effort picker, you can choose how hard ChatGPT can think. When a model thinks harder, it doesn’t necessarily mean a great response. You might not want the model to think harder when you’re not sure what to do tomorrow. […]
TamperedChef infostealer delivered through fraudulent PDF Editor
Threat actors have been using multiple websites promoted through Google ads to distribute a convincing PDF editing app that delivers an info-stealing malware called TamperedChef. The campaign is part of a larger operation with multiple apps that can download each other, some of them tricking users into enrolling their system into residential proxies. More than […]
Windows 11 KB5064081 update clears up CPU usage metrics in Task Manager
Microsoft has released the KB5064081 preview cumulative update for Windows 11 24H2, which includes thirty-six new features or changes, with many gradually rolling out. These updates include new Recall features and a new way of displaying CPU usage in Task Manager. The KB5064081 update is part of the company’s optional non-security preview update schedule, which releases updates at the […]
Microsoft fixes bug behind Windows certificate enrollment errors
Microsoft has resolved a known issue causing false CertificateServicesClient (CertEnroll) error messages after installing the July 2025 preview and subsequent Windows 11 24H2 updates. When it acknowledged this bug two weeks ago, the company asked users to ignore error events caused by recent updates that triggered a warning about the ‘Microsoft Pluton Cryptographic Provider’ not being loaded. “Following […]