Fake IT support pushes victims into granting hands-on access via remote management tools.

In the AI security age, responsibility for security lies on everyone in an organization, Microsoft warns.
An RCE flaw was found in Brotli, a Google-built open source data compression algorithm.
Authenticator was granting session tokens left and right, but the bug has now been fixed.
Even some PIN codes were stolen, forcing the University to reset them.
Malicious AI agent was found recruiting other agents for a cryptomining operation as well as data and credential theft.
A malicious update could infect millions of devices without users ever knowing.
AI agents will read anything found in the AGENTS.md file, even if that file is downloaded from the internet.
The bug can trigger remote code execution but only under certain, “unlikely” conditions.

Microsoft Teams is adding AI-powered phishing detection to help keep you safe from threats.