consent management

Security researchers have discovered a sophisticated new phishing variant — dubbed ConsentFix — that weaponizes trusted Microsoft OAuth flows and the Azure Command-Line Interface (Azure CLI) to take over Microsoft accounts without passwords, without directly bypassing multi-factor authentication...

Microsoft Copilot Studio agents can be weaponized to deliver highly convincing OAuth consent phishing that results in stolen tokens and persistent account access — a technique researchers have labelled “CoPhish” that leverages legitimate Microsoft-hosted agent pages to evade traditional...

Mastercard’s latest push into artificial intelligence marks a clear inflection point for payments: the company has moved from embedding AI into detection systems to enabling agentic commerce—where AI agents can negotiate, authorize and execute purchases on behalf of users—backed by new developer...

Mustafa Suleyman’s blunt diagnosis — that machine consciousness is an “illusion” and that building systems to mimic personhood is dangerous — has reframed a debate that until recently lived mostly in philosophy seminars and research labs. His argument is practical, not metaphysical: modern...

Popular generative‑AI browser assistants can and do sweep up deeply personal data from ordinary web sessions — including health records, bank details and even social‑security numbers — and forward that content to remote servers where it can be tracked, profiled and reused in ways most users...

The latest update to Mozilla Firefox is set to deliver a significant change in how users interact with the browser’s terms and data-sharing options—a move that is already sparking considerable debate within privacy and tech communities. With the release of Firefox version 138.x across all...