InfoSecBulletin Cybersecurity for mankind

Anthropic is making a new Claude feature called “Money.” It’s a separate tab in the mobile app. The new interface shows that users can “link your bank accounts” and ask Claude about spending and financial plans. There is no Money tab on Claude’s web interface yet. Money seems made to …

GhostCode is a new phishing kit that changes a regular Microsoft 365 sign-in into an account theft. It doesn’t need to hack a password. Instead, it tricks people into letting criminals into their work accounts. The campaign started with normal messages sent through business contact forms. Attackers pretended to be …

CISA has added a serious Cisco Secure Email Gateway flaw to its list of known exploits. They warn that attackers are using this flaw in real attacks. The flaw, known as CVE-2026-76461, impacts Cisco AsyncOS software on Cisco Secure Email Gateway devices. CVE-2026-76461 is a type of SQL injection flaw, listed …