A threat actor is allegedly offering a private remote code execution exploit for Fortinet FortiGate SSL VPN appliances, claiming that FortiOS 7.2.x and 7.4.x are affected. The listing has not been independently verified and does not confirm the existence of a new FortiGate zero-day vulnerability. The ad by Dark Web …

Anthropic is making a new Claude feature called “Money.” It’s a separate tab in the mobile app. The new interface shows that users can “link your bank accounts” and ask Claude about spending and financial plans. There is no Money tab on Claude’s web interface yet. Money seems made to …

GhostCode is a new phishing kit that changes a regular Microsoft 365 sign-in into an account theft. It doesn’t need to hack a password. Instead, it tricks people into letting criminals into their work accounts. The campaign started with normal messages sent through business contact forms. Attackers pretended to be …