Attackers took over a trusted ConnectWise cloud backup app and, with help from an AI hacking tool, tried to get into more than 2,250 Microsoft 365 tenants. Here's what happened, what's still unknown, and what businesses should check now.

Passkeys are replacing passwords on more and more sites. Here's what happens behind the scenes when you use one, and why fake login pages can't trick them.

Two critical PHP flaws, nicknamed PHP2Shell, let attackers run code on web servers without logging in. Here's how they work, why AI is part of the story, and what you should do.