Security firm AIR built a harmless fake skill, got it past Cisco and NVIDIA scanners, and says it reached 26,000 agents, exposing a blind spot in how skills are vetted.
A phishing campaign is using a fake Google Account security page to deliver a web-based app capable of stealing one-time passcodes, harvesting cryptocurrency wallet addresses, and proxying attacker ...