Varonis reported the flaw to Google in late 2025 and it has been addressed, but it reminds defenders to take a look at their ...

A threat group researchers call "Armored Likho" has gained access to government agencies and electrical power entities in ...

Potentially a broader lesson from this redesign is that despite the improvements we can empirically observe, route changes ...

A new report reveals that AI agents can autonomously execute ransomware attacks, evidenced by the case of JADEPUFFER, which ...

Zscaler found attackers using SEO poisoning and hidden prompts in malicious websites to manipulate AI agents into making cryptocurrency payments.

Researchers at Sysdig say they have observed, for the first time, a ransomware attack carried out almost entirely by an AI agent. According to the ...

JadePuffer exploited a vulnerable Langflow server, harvested credentials, moved laterally, and encrypted more than 1,300 ...

The FBI warned that TeamPCP software supply chain attacks targeted developer tools to steal cloud credentials, SSH keys, and ...

Attackers exploited Langflow vulnerability CVE-2025-3248 to conduct an agentic AI-powered ransomware attack involving reconnaissance, credential theft, and lateral movement.

An international police operation spanning seven countries has uncovered highly organized networks of offenders who drug and ...

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.