Discover how the Rogue Agent vulnerability in Google Dialogflow CX enabled persistent AI agent compromise, data exfiltration, ...

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices belonging to sensitive organizations in Ukraine, the latter country’s CERT ...

We’ve all done it before: a simple project that escalated to the point of extreme overengineering. But what’s less common is ...

David takes on Goliath, and rest is history ...

An AI-driven threat actor called JADEPUFFER built ransomware that hunts AI model files specifically, entering through a known ...

MCP is standardizing how AI agents connect to tools and data, replacing custom integrations with reusable servers. Here's how ...

Behavioural tools can compensate, but new approaches to AI injection attacks are needed, Kaspersky has warned.

With a July update, the Python package manager will finally allow users to install only the dependencies for a project, without having to install the project itself.

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture sessions.

JADEPUFFER exploits Langflow CVE-2025-3248 to deploy ENCFORGE ransomware against AI model weights, vector indexes, and training data on the host.

GitHub and PyPI (Python Package Index) have introduced a time-based mechanism in the Dependabot dependency management tool to ...

A new report reveals that AI agents can execute ransomware attacks autonomously, as demonstrated by the case of JADEPUFFER, which exploited a critical vulnerability to infiltrate systems.