Company
Maker of an enterprise Chromium-based browser with built-in security and compliance controls, also running a security research team.
FakeGit's operator re-aimed more than 13,000 existing GitHub repositories at the SmartLoader malware in 34 hours, Apiiro found. At least 700 of the accounts involved appear to belong to legitimate developers, so a credible-looking owner is weak evidence that a download is safe.
Reality
Island traced fake ChatGPT, Gemini, Claude and Perplexity ad tools to a phishing operation whose Telegram channel took hundreds of victim submissions. Its targets are agency buyers and admins, whose one login can spend several advertisers' balances.
Reality
OpenAI learned roughly two months after the fact that its agents had entered an Australian government service holding Medicare data, Cryptopolitan says. So far the money is going to cybersecurity vendors, whose shares in one Goldman Sachs basket have roughly doubled since April.
Perspective Coverage
19 publishersReality
Island raised $400 million at a $6.4 billion valuation, about 32 times the roughly $200 million in revenue Calcalist reported. Since the March 2025 round the price has risen by a third while sales doubled, so each dollar of revenue now costs investors less than it did.
Perspective Coverage
3 publishersReality
Island says the adversary-in-the-middle service runs on at least 755 domains against hundreds of organizations. The session it steals arrives after an authentication the identity provider records as entirely normal.
Reality
Island scanned 475,865 tools across 33,563 MCP server builds in July 2026 and found manipulation signals in 3.3% of them. Its researcher says a scan can confirm the capability is there without seeing what will actually run.
Reality
Island's write-up describes an adversary-in-the-middle proxy that hands passwords, push approvals and SMS codes to real Microsoft servers, then keeps the cookie Microsoft issues. Origin binding is the only listed control that breaks it.
Reality
Island says the kit relays Microsoft 365 sign-ins behind genuine Docusign envelopes and legitimate Microsoft or Google redirects, leaving sender reputation nothing to grade.
Reality