Bluekit phishing kit adopts browser-in-the-middle for login theft

The Bluekit phishing-as-a-service platform continues to evolve with nearly 70 new hostnames identified over the past week and ...

Email Threat Radar — June 2026

The latest email threats: real Microsoft login phishing, device code scams with a kill switch, split-click attacks, and the ...
Tech Times

Cloudflare, Chrome, and Firefox Plan to Replace CAPTCHAs With Cryptographic Tokens

CAPTCHA replacement protocol PACT was announced June 22 by Cloudflare, Chrome, Firefox, and Edge — using cryptographic blind ...
SecurityWeek

Critical SimpleHelp Vulnerability Exploited for Malware Delivery

A threat actor has been exploiting CVE-2026-48558, a critical SimpleHelp vulnerability, to drop TaskWeaver and Djinn Stealer ...
Hackaday

This Week In Security: Windows 10 Gets Another Year, SmartTV Botnets, Hiding Payloads, And LastPass Customer Leak

Unsurprisingly to many of us, app stores for smart televisions are also trash. Perhaps even more full of trash than other app stores due to the smaller ecosystem and fewer reviewers. Spur analyzed ...

SimpleHelp Flaw Exploited to Deploy Malware Targeting Windows, macOS, and Linux

A SimpleHelp authentication flaw is being exploited to deploy Djinn Stealer, a cross-platform malware targeting cloud, ...
theregister

Vercel debuts eve open source agent framework, tries to fix shadow AI with Passport

Vercel introduced an open source agent framework called eve at its Ship event in London this week, along with other new features including Passport, an attempt to put employee apps created with AI ...
The Hacker News

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API

Kaspersky reports ToddyCat’s Umbrij abuses headless Chromium and OAuth flows to extract Gmail authorization codes, enabling ...
The Next Web

Token prices fell 98%. Enterprise AI bills tripled. Now the industry wants a standards body to explain why.

Enterprise AI bills are tripling despite a 98% drop in per-token prices, as agentic tools drive consumption 18.6x higher per developer. The Linux Foundation is launching the Tokenomics Foundation to ...

ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...
TechCrunch

The token bill comes due: Inside the industry scramble to manage AI’s runaway costs

Across the industry, companies are starting to balk at the price of AI. Uber blew through its entire 2026 AI coding budget by April. Microsoft revoked its developers’ Claude Code licenses months after ...