TLDRocket
Sign in

Cybersecurity

194 summarised stories about Cybersecurity, each linking back to the original source. Browse all topics →

+ Follow this topic

Tuesday, 22 September 2026

Microsoft disrupts AI-assisted platform that compromised 12,000 accounts

Ars Technica 3 weeks ago 40

Microsoft disrupted the EvilTokens scam platform that used an AI chatbot to compromise 12,000 Microsoft accounts over a few-month span. The service was introduced in February with a $1,500 initial fee and $500 in monthly charges. As a result, Microsoft positioned the takedown as stopping an industry-wide email-fraud operation that streamlined targeting and follow-up message drafting.

Meta patches Muse exploit that let attackers control the AI agent

The Verge 3 weeks ago 11 ● 26 sources

Meta patched its Muse macOS app after a zero-day vulnerability was found that could let attackers take control of the AI agent by redirecting transcription processing. The flaw, reported by Patrick Wardle, involved an undocumented Muse setting and could enable attackers who run local code to access Muse accounts. After the patch, Muse should no longer allow that setting to route transcription from Meta servers to an attacker-controlled endpoint, limiting account takeover risk.

The daily briefing

Every AI story that matters, in your inbox by 8am.

TLDRocket reads all relevant sources, removes duplicate coverage, and summarises the day in two minutes. Follow companies and topics for alerts, or get the briefing in Slack. Free, no spam, unsubscribe anytime.