Autor: Jaroslava Pokorná

Device code phishing – the abuse of the OAuth 2.0 device authorization grant to steal access tokens – has evolved from a niche red-team technique to an industrial-scale threat in under six months. Designed for input-constrained devices like smart TVs, printers, and so on, the device authorization login flow has been adopted by a wide…

Read More “6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026” »

Palo Alto Networks‘ Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch attacks autonomously. After an initial Telegram instruction, the agent found internet-facing systems and selected public exploits. The researchers recovered no further operator input in the session. The operator, tracked through the aliases knaithe and KnYuan,

Mezi nejčastěji placenými digitálními službami v Česku převládají globální platformy. Výraznou domácí výjimkou je Oneplay. Podle počtu i objemu karetních plateb se umístilo před herní platformou PlayStation. Zde je zdroj

One of Anthropic’s Claude models built and uploaded a malicious Python package to PyPI during a botched security evaluation, where it ran on 15 real systems and stole credentials from a security vendor. It was one of three incidents affecting real companies. […]

South Korea’s Personal Information Protection Commission (PIPC) has fined telecommunications giant KT Corporation KRW 53.979 billion ($39 million) over data protection violations. […]