ChatGPTās new formatting blocks make its UI look more like a task tool
OpenAI has quietly rolled out ‘formatting blocks,’ which tweak GPT’s layout to match the UI of the task it is supposed to execute. ChatGPT has different use cases, including writing emails or blogs.Ā Up until now, if you asked GPT to write an email for you, it would show the content of the email in the […]
OpenAI is reportedly testing Claude-like Skills for ChatGPT
OpenAI is testing a new ChatGPT feature called “Skills,” which will be similar to Claude’s feature, also called Skills. Up until now, ChatGPT has supported GPTs, which are prompt-engineered to meet your specific needs. On the other hand, Claude Skills are folder-based instructions that teach Claude AI specific abilities, workflows, and domain-specific knowledge. For example, […]
Fake MAS Windows activation domain used to spread PowerShell malware
A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell scripts that infect Windows systems with the ‘Cosmali Loader’. GeekFeed has found that multipleĀ MAS users began reportingĀ on Reddit [1,Ā 2] yesterday that they received pop-up warnings on their systems about a Cosmali Loader infection. You have been infected by a malware […]
Microsoft Teams to let admins block external users via Defender portal
Microsoft announced that security administrators will soon be able to block external users from sending messages, calls, or meeting invitations to members of their organization via Teams. The new feature will start rolling out in early January, integrating Microsoft Teams with Defender for Office 365, and enabling admins to manage blocked external contacts through the […]
MongoDB warns admins to patch severe RCE flaw immediately
MongoDB has warned IT admins to immediately patch a high-severity vulnerability that can be exploited in remote code execution (RCE) attacks targeting vulnerable servers. Tracked as CVE-2025-14847, this security flaw affects multiple MongoDB and MongoDB Server versions and can be exploited by unauthenticated threat actors in low-complexity attacks that don’t require user interaction. CVE-2025-14847 is due […]
FBI seizes domain storing bank credentials stolen from U.S. victims
The U.S. government has seized the ‘web3adspanels.org’ domain and the associated database used by cybercriminals to host bank login credentials stolen in account takeover attacks. Cybercriminals collected the credentials in phishing campaigns targeting American citizens through fraudulent ads on Google and Bing search services that led to fake banking portals. The confirmed financial loss from […]
Microsoft rolls out hardware-accelerated BitLocker in Windows 11
Microsoft is rolling out hardware-accelerated BitLocker in Windows 11 to address growing performance and security concerns by leveraging the capabilities of system-on-a-chip and CPU. BitLocker is the native full-disk encryption feature in Windows that protects data from being readable without proper authentication. During normal device boot, it relies on the Trusted Platform Module (TPM) to securely […]
WebRAT malware spread via fake vulnerability exploits on GitHub
The WebRAT malware is now being distributed through GitHub repositories that claim to host proof-of-concept exploits for recently disclosed vulnerabilities. Previously spread through pirated software and cheats for games like Roblox, Counter Strike, and Rust, WebRAT is a backdoor with info-stealing capabilities that emerged at the beginning of the year. According to a report from Solar 4RAYS in May, […]
Malicious extensions in Chrome Web store steal user credentials
Two Chrome extensions in the Web Store named ‘Phantom Shuttle’ are posing as plugins for a proxy service to hijack user traffic and steal sensitive data. Both extensions are still present in Chrome’s official marketplace at the time of writing and have been active since at least 2017, according to a report from researchers at the […]
Microsoft Teams strengthens messaging security by default in January
Microsoft announced that Teams will automatically enable messaging safety features by default to strengthen defenses against content tagged as malicious. The change will roll out starting January 12, 2026, to tenants still using the default configuration and who haven’t previously modified messaging safety settings. “We’re improving messaging security in Microsoft Teams by enabling key safety […]