Spring AI enterprise Java is now in production, but agent security is the next crisis: UberConf 2026 opens today in Denver ...

SAP has released 20 security notes, including four patching critical vulnerabilities in NetWeaver, AppRouter, and Commerce ...

OpenAI 发布了 GPT-Live System Card，GPT-Live-1 和 GPT-Live-1 mini 被描述为新一代语音模型，支持 full-duplex，也就是可以持续听、持续回应，不必等用户完整说完一句话才开始处理。 昨天，也就是2026 年 7 月 8 日，AI 圈有几个信号放在一起看，非常值得 Java 开发者关注。 OpenAI 发布了 GPT-Live System ...

Phishing campaigns continue to evolve. As organizations strengthen credential-based defenses with MFA, password managers, and phishing-resistant authentication, attackers have shifted their focus from ...

The FBI has issued a public service announcement warning about a new phishing kit that's stealing Microsoft OAuth tokens at an alarming rate. OAuth token theft is a serious headache for organizations ...

Mitiga researchers say attackers can silently redirect Claude Code MCP traffic, intercept OAuth tokens, and maintain persistent access to connected SaaS platforms. An OAuth token with wide access ...

Microsoft Defender Security Research has observed a widespread phishing campaign leveraging the device code authentication flow to compromise organizational accounts at scale. While traditional device ...

Cybersecurity researchers are calling attention to an active device code phishing campaign that's targeting Microsoft 365 identities across more than 340 organizations in the U.S., Canada, Australia, ...

Microsoft observed phishing-led exploitation of OAuth’s by-design redirection mechanisms. The activity targets government and public-sector organizations and uses silent OAuth authentication flows and ...

Attackers trick users into approving access on real Microsoft pages OAuth device code phishing surged sharply since September 2025 Both cybercriminals and state-linked actors reportedly use this ...