Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

has documented what it says is the first ransomware operation carried out from start to finish by an autonomous artificial ...

Google is pressing its massive Gmail user base to replace traditional passwords with passkeys, a move grounded in federal ...

Oracle expands its AI database security strategy with new data protection, patching, and cyber resilience tools to help ...

A newly disclosed use-after-free in the Linux kernel's epoll code, CVE-2026-46242, lets an unprivileged user get root on ...

Threat actors are exploiting an unauthenticated information disclosure vulnerability in the WordPress plugin Gravity SMTP, active on 100,000 sites. The flaw is tracked as CVE-2026-4020 and received a ...

Armored Likho BusySnake Stealer, a Python-based infostealer first disclosed by Kaspersky, is actively targeting government ...

Cordyceps, a systemic class of exploitable CI/CD vulnerabilities, allows unauthenticated attackers to hijack developer ...

Sysdig's JadePuffer case is billed as the first ransomware attack planned and executed end to end by an AI agent, with no human directing it.

The shadow fleet—aging tankers linked to Russia and China that cut subsea cables and evade sanctions—threaten global data ...

Google Searches Could Expose Users To Crypto Wallet Risks. Search engines have long been treated as neutral starting points for online activity, but crypto security experts are increasingly warning ...

Google is warning of a cyber espionage campaign linked to a China-nexus threat actor, UNC6508, that kept close tabs on valuable US and Canadian research environments for over a year. The campaign ...