Phishing emails have acquired a second reader. Security researchers have documented a campaign in which each message carries two payloads: a conventional social-engineering lure meant for the person who opens it, and a set of concealed instructions aimed at the AI assistant that summarizes, prioritizes and triages the inbox before any human sees it. A … Read more
AI agents that browse, click, fill forms and buy now inherit their owners’ logged-in sessions. That convenience creates an unresolved security problem: prompt injection, where hidden text in a webpage, email, document or image is read as an instruction. The result is an attack surface inside the bank, inbox and cart. OWASP ranks it first: … Read more
OpenAI has quietly turned its ChatGPT extension for Chrome into something much closer to an autonomous assistant. In an update announced on October 15, 2026, the add-on gained the ability to read every tab a user has open and to act inside those pages — filling out forms, sending messages, downloading files and grouping a … Read more
A suspicious login at 3 a.m. no longer waits for a human analyst to wake up. Inside the most advanced security operations centres, an autonomous agent now checks the device against the asset inventory, reviews the user’s geolocated access history, cross-references the source IP against threat intelligence feeds, concludes the account has been compromised and … Read more