Varonis Threat Labs disclosed a technique called TrustSink in which an attacker with a highly privileged Entra account registers a rogue external MFA provider that inserts a fake password prompt into legitimate login flows, capturing users' plaintext passwords. The rogue provider still returns a valid signed token to Entra, so the sign-in completes normally with no visible error, and resetting a stolen password does not remove the malicious provider from the authentication flow. Varonis says the method could work with any authentication system using this external MFA model but demonstrated it specifically against Microsoft Entra.
President Trump's latest federal financial disclosure shows 1,156 securities transactions in July, valued between roughly $79 million and $270 million combined. The biggest moves were July 20 sales of between $5 million and $25 million each of Microsoft and Amazon shares, alongside a $1-5 million sale of Oracle stock and a purchase of $500,001-$1 million in Nvidia. Days later, on July 23, he reported buying smaller amounts of Microsoft and Amazon.
A new report finds that the growing volume of AI-generated content online is eroding consumer trust, weakening the influence that social media personalities have historically had over purchasing decisions. Shoppers who once relied on influencer recommendations for items like clothing and home appliances are said to be growing more skeptical of what they see online.
Sweden's data protection authority IMY has fined IT provider Miljödata SEK 1.8 million ($183,000) following a GDPR investigation into an August 2025 ransomware attack. The breach hit systems used by 80% of Swedish municipalities, exposing personal ID numbers, health data, and records involving minors after attackers published stolen data on the dark web under the name 'Datacarry'.
Apple's iPhone 18 Pro physically shrinks the Dynamic Island by moving some Face ID components under the display, freeing up extra screen space. That space is now used to show more detail in a second Live Activity, such as a timer's remaining time instead of just an icon, while the device can also run three Live Activities at once, up from two.
COROS has released the Pace 4 Pro, an endurance-sports smartwatch featuring a 1.47-inch LTPO AMOLED display, the largest the company has made, with sapphire glass and a titanium alloy bezel. The watch offers up to 21 days of battery life (seven with always-on display), doubled RAM over its predecessor, and is available now in Black or White for $449.
Waymo is expanding its teen account program, launched in Phoenix last year, to Nashville, letting riders aged 13-17 use its robotaxis with a parent or guardian linked to the account. Teens can hail rides anywhere within Waymo's Nashville service area and bring up to three friends aged 13-17 along. A company spokesperson said this is the first of many such launches planned across additional markets in coming months.
Coyote vs. Acme, the film Warner Bros. once shelved for a $30 million tax write-off, has now crossed $100 million domestically and surpassed its $70 million production budget. Distributor Ketchum Entertainment credited fans for the milestone, and the film has outgrossed five of Warner Bros.' eight 2026 domestic releases, including The End of Oak Street.
French security firm CrowdSec disclosed that attackers used the Shai-Hulud worm to compromise a former employee's machine in May, stealing a GitHub OAuth token that still had read access to the company's private repositories. Over roughly nine minutes, attackers downloaded about 170 private repos plus 130+ public ones; CrowdSec only learned of the breach on September 16 after stolen source code surfaced on the cybercrime marketplace pwnforum.
A fresh Resident Evil movie, directed by Zach Cregger and reviewed positively by Ars Technica, tells an original story with new characters set within the established game universe rather than adapting a specific title. The film follows a disappointing 2021 reboot, Welcome to Raccoon City, which underperformed at the box office and led to a canceled Netflix series, and Cregger says he aimed for a straightforward, character-driven horror experience rather than complex timelines.
Sony's new PlayStation 5 system software update (26.06-14.00.00) turns on the 'Enhance PSSR Image Quality' setting by default for PS5 Pro owners. This applies Sony's newer, upgraded PSSR upscaling algorithm to games originally built around the first version of PSSR, without users needing to manually toggle it. The enhanced PSSR itself launched in March as an optional setting, not a new PSSR 2.0 release.
Coverage Cat, a Y Combinator S22 startup, has launched as a licensed insurance brokerage that lets shoppers compare home, umbrella, auto, and renters coverage using AI-guided intake paired with human brokers. The service is currently available in California, Florida, New York, Texas, and Washington, and offers an Agent API for developers to integrate the comparison flow into other applications.
GoKawiil