Insights

31/7/2025

Threat actors are actively exploiting a critical security flaw in "Alone – Charity Multipurpose Non-profit WordPress Theme" to take over susceptible sites. The vulnerability, tracked as CVE-2025-5394, carries a CVSS score of 9.8. Security researcher Thái An has been credited with discovering and reporting the bug.

7/8/2025

The company’s CEO Sam Altman called GPT-5 “a significant step along the path to AGI” during a press briefing on Wednesday. While he stopped short of claiming the model reaches artificial general intelligence, Altman noted the latest release is “clearly a model that is generally intelligent.”

12/8/2025

Microsoft is starting to roll out lightweight taskbar apps for Microsoft 365 users on Windows 11. These taskbar apps will automatically launch at startup and provide quick access to contacts, file search, and calendar straight from the Windows taskbar.

26/6/2025

An ongoing phishing campaign abuses a little‑known feature in Microsoft 365 called "Direct Send" to evade detection by email security and steal credentials.

12/6/2025

A critical zero-click vulnerability in Microsoft 365 Copilot, dubbed “EchoLeak,” enables attackers to automatically exfiltrate sensitive organizational data without requiring any user interaction.

2/6/2025

We're excited to announce the general availability of Researcher and Analyst, two first-of-their-kind reasoning agents designed specifically for work. Since these agents debuted in April through the Frontier program, early users are increasingly turning to them to complete complex, analytical work in minutes—saving time and resources. Now, these powerful agents are available to everyone with a Microsoft 365 Copilot license.

12/5/2025

Apple on Monday pushed out patches for security vulnerabilities across the macOS, iPhone and iPad software stack, warning that code-execution bugs that could be triggered simply by opening a rigged image, video or website.

19/5/2025

Threat actors have been distributing trojanized versions of the KeePass password manager for at least eight months to install Cobalt Strike beacons, steal credentials, and ultimately, deploy ransomware on the breached network. WithSecure's Threat Intelligence team discovered the campaign after they were brought in to investigate a ransomware attack. The researchers found that the attack started with a malicious KeePass installer promoted through Bing advertisements that promoted fake software sites.

23/5/2025

Microsoft is now testing a new feature in Notepad that can generate text for you using AI. It’s part of a Windows 11 update being released to Windows Insiders in the Canary and Dev channels with Copilot Plus PCs.