A prompt injection attack can trick GitHub’s preview Agentic Workflows into retrieving content from private repositories and ...

Researchers show HalluSquatting can make AI coding agents fetch fake repositories or skills and run attacker-supplied code.

Zscaler found attackers using SEO poisoning and hidden prompts in malicious websites to manipulate AI agents into making cryptocurrency payments.

Ubiquiti has released security updates to patch seven critical vulnerabilities in UniFi OS, including a maximum-severity flaw ...

Noma Labs tricked GitHub's AI agent into leaking private repositories with a crafted issue. The prompt-injection flaw, GitLost, has no code fix.

A critical prompt injection vulnerability in GitHub Agentic Workflows could allow unauthenticated attackers to leak private repository data, ...

The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data ...

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't ...

When these agents are deployed at enterprise-grade scale, your risk will not just amplify, it will mutate.' 'And the reason ...

In 2025 and 2026, several independent sources have highlighted the same trend: Prompt injection remains one of the most ...

Google fixed Rogue Agent, a Dialogflow CX Code Blocks flaw that could let one writable agent affect every chatbot in a Cloud ...

As enterprises rapidly embrace multimodal AI capable of understanding both text and images, security researchers are discovering that these powerful new capabilities introduce equally sophisticated ...