Cybersecurity researchers have discovered two new malicious extensions on the Chrome Web Store that are designed to exfiltrate OpenAI ChatGPT and DeepSeek conversations alongside browsing data to servers under the…
Threat actors are using the social engineering technique and a legitimate Microsoft tool to deploy the DCRat remote access Trojan against targets in the hospitality sector. – Read More
The start of 2026 has brought news of a welcome series of female leadership appointments and promotions in the legal tech arena, including a new chief operating officer at Harvey;…
The CERT Coordination Center (CERT/CC) has disclosed details of an unpatched security flaw impacting TOTOLINK EX200 wireless range extender that could allow a remote authenticated attacker to gain full control…
Register HERE While 2025 may have been the year of AI adoption, many law firms are finding that AI initiatives struggle to progress, not because the tools are inadequate, but…
Source: Securonix Cybersecurity researchers have disclosed details of a new campaign dubbed PHALT#BLYX that has leveraged ClickFix-style lures to display fixes for fake blue screen of death (BSoD) errors in…
The Invisible Half of the Identity Universe Identity used to live in one place – an LDAP directory, an HR system, a single IAM portal. Not anymore. Today, identity is…
Popular artificial intelligence (AI)-powered Microsoft Visual Studio Code (VS Code) forks such as Cursor, Windsurf, Google Antigravity, and Trae have been found to recommend extensions that are non-existent in the…
Security researchers have flagged a high-severity flaw in Open WebUI, a self-hosted enterprise interface for large language models, that allows external model servers connected via its Direct Connections feature to…
Sarah Sackman says recovery plan would have restored systems, but not fixed longstanding vulnerabilities. – Read More
‘Moment of madness’ A junior solicitor has been suspended from practice for two years after deleting a paragraph from an internal handover document when he failed to follow the instructions…
Longtime security chief George Gerchow had sought top-notch security engineers and developers to build his team. Gerchow considered these workers “superstars” — and they proved him right in many ways.…
A new critical security vulnerability has been disclosed in n8n, an open-source workflow automation platform, that could enable an authenticated attacker to execute arbitrary system commands on the underlying host.…
Users of the “@adonisjs/bodyparser” npm package are being advised to update to the latest version following the disclosure of a critical security vulnerability that, if successfully exploited, could allow a…
Two of the law firms owned by Lawfront, the largest buy-and-build group backed by private equity, have made their own acquisitions, in our first M&A round-up of the year. The…