ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...

Bacteria's 'mix-and-match' code could create new cancer-fighting drugs

A team of researchers at the University of Warwick and Monash University has solved a puzzle that has stumped drug developers ...
The New York Times

How A.I. Might Change the Way Doctors Think

For generations, writing up a summary of a patient exam was a vital step for physicians trying to make an accurate diagnosis. What happens when A.I. does it for them? Credit...Illustration by Emmanuel ...
Microsoft

AutoJack: How a single page can RCE the host running your AI agent

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...
Microsoft

Securing AI agents: When AI tools move from reading to acting

MCP tool poisoning turns trusted AI agents into a control plane for data loss. Learn how threat actors manipulate tool ...

How ChatGPT Actually Picks Sources (I Read The Network Traffic, Not The Outputs)

This study from Suganthan reveals hidden fields in ChatGPT's network traffic that decide which sources get fetched, cited, or ...
Tech Times

OpenAI Silently Rolled GPT-5.6 to Some Codex Users: A Hidden Prompt Exposes the Swap

GPT-5.6 was already running in Codex for some users before OpenAI’s government-approved preview opened to partners. A ...