Edwin Kwan
  • Home
  • Speaker
  • Podcasts
    • Cyber Bites
    • AppSec Unlocked
    • It’s 5:05 Podcast
  • Journal
  • Publications
Select Page

Hackers Exploit Meta’s AI Support Bot to Hijack High-Profile Instagram Accounts

Jun 4, 2026 | Podcast

https://krebsonsecurity.com/2026/06/hackers-used-metas-ai-support-bot-to-seize-instagram-accounts Hackers have successfully exploited a critical vulnerability in Meta’s AI customer support bot to seize control of high-profile Instagram accounts, including those...

Google Chrome Bolsters Security With Session Cookie Theft Protection for All Users

Jun 3, 2026 | Podcast

https://workspaceupdates.googleblog.com/2026/05/prevent-account-takeovers-with-DBSC-now-generally-available-in-the-Chrome-browser-for-Windows.html Google has rolled out a significant security upgrade to its Chrome browser, extending session cookie theft protection to...

Cybercriminals Exploit ChatGPT Share Links to Distribute Malware Via Fake Outage Pages

Jun 2, 2026 | Podcast

https://pushsecurity.com/blog/llmshare-malvertising-campaign Threat actors have found a novel way to abuse ChatGPT’s conversation sharing feature, using publicly accessible share links to host convincing fake outage pages designed to deceive unsuspecting users....

Anthropic Expands Claude Mythos Preview Access to Australian Organisations Through Project Glasswing

Jun 1, 2026 | Podcast

https://www.anthropic.com/news/expanding-project-glasswing Anthropic is broadening its cutting-edge AI program to Australian shores, with the company confirming that local organisations are now included in its Project Glasswing early access initiative. The expansion...

AI Emerges as a Game-Changer in Cyber Defence, Australian Signals Directorate Reports

May 28, 2026 | Podcast

https://www.cyber.gov.au/business-government/secure-design/artificial-intelligence/opportunities-for-ai-in-cyber-defence Artificial intelligence is rapidly transforming the cybersecurity landscape, offering defenders powerful new tools to detect, respond to, and...

Anthropic’s Restricted Claude Mythos Model Moves Closer to Public Release

May 27, 2026 | Podcast

https://www.anthropic.com/research/glasswing-initial-update Anthropic appears to be preparing a broader rollout of Claude Mythos. First announced in early April as a restricted early preview, Mythos represents a significant capability jump over Anthropic’s...

Anthropic’s AI Model Finds Over Ten Thousand Critical Vulnerabilities in Global Software Infrastructure

May 26, 2026 | Podcast

https://www.anthropic.com/research/glasswing-initial-update Anthropic has published an initial update on Project Glasswing, a collaborative security initiative launched last month in which the company and approximately 50 partner organisations have used...

npm Introduces Human Approval Gates to Counter Software Supply Chain Attacks

May 25, 2026 | Podcast

Staged publishing and new install-time controls for npm GitHub has released two significant security updates for npm, the world’s largest software package registry and the primary distribution channel through which JavaScript developers share and consume...

HackerOne Slashes Bug Bounty Payouts as AI Floods Open-Source Security Programs

May 22, 2026 | Podcast

https://hackerone.com/ibb/bounty_table_versions?change=2026-05-18T20%3A25%3A03.903Z&type=team HackerOne has cut reward payments across its Internet Bug Bounty (IBB) program by more than 75 percent, reducing the payout for a critical vulnerability from $9,250 to...

CISA Credentials Exposed in Public GitHub Repository for Six Months Before Takedown

May 21, 2026 | Podcast

https://blog.gitguardian.com/how-we-got-a-cisa-github-leak-taken-down-in-26-hours Researchers at GitGuardian discovered a public GitHub repository named “Private-CISA” containing 844 megabytes of sensitive data belonging to the United States Cybersecurity...
« Older Entries
Next Entries »

Latest Posts

  • Passkeys vs Passwords: Readers Debate Whether a Smartphone PIN Can Really Be Safer Than a Complex Password
  • FIFA Bug in World Cup Streaming Infrastructure Opened Door to Remote Takeover
  • The Digital Trove: How a Single Hack Exposed One Man’s Entire Life and Why We’re All Vulnerable
  • A Three-Stage Vulnerability Chain Turning Microsoft 365 Copilot Into a Silent Data Exfiltration Weapon
  • Malicious JetBrains Marketplace Plugins Discovered Stealing AI API Keys from Developers

Speaking Events

  • Guest Lecture at UNSW Business School for INFS5907
  • Speaker at Bugcrowd Luncheon
  • Guest Lecture at UNSW
  • Panelist at SecTalks Legends – 2025
  • Keynote Speaker at Sydney AI Security Summit 2025

More Content

  • Articles (26)
  • Podcast (810)
  • Posts (26)
  • Publications (1)
  • Speaking (50)
  • X
  • RSS
Edwin Kwan