Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

Microsoft details AutoJack exploit chain targeting AutoGen Studio MCP WebSocket in pre-release builds, enabling ...

How I stopped a massive WordPress spam attack with 4,700 lines of code in two days - thanks to Codex and Claude ...

AI is accelerating the pace of cyberattacks. As high-performance AI models take on tasks such as detecting zero-day ...

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...

Across Southeast Asia, CISOs tell me the threat environment no longer just sounds more dangerous, it feels structurally different. In my most recent CSO ASEAN Executive Session, I sit down with Sam ...

Chainguard will use AI to protect open-source code. Athena pools open-source users, developers, and maintainers. Others are ...

A flaw in Hugging Face Transformers could allow malicious AI models to execute code, exposing credentials and highlighting AI supply chain risks.

Makers of AI browsers make lofty promises. With a single prompt, users can ask one to find a restaurant in a particular part ...

OS 26.5.2 security update arrives weeks early as Apple adapts to AI tools that compress vulnerability discovery into hours.

The critical libssh2 CVE-2026-55200 flaw inverts SSH security: the remote server attacks the connecting client, no ...

IBM has joined the OpenAI Daybreak Cyber Partner Program to bring advanced frontier AI capabilities into security operations, ...