Chatbots now place orders, code assistants push updates, and autonomous agents comb production databases while you sleep.

Zscaler found attackers using SEO poisoning and hidden prompts in malicious websites to manipulate AI agents into making cryptocurrency payments.

FortiBleed campaign targeting FortiGate firewalls is tied to INC and Lynx ransomware, with over 110 million stolen credentials linked to attacks.

Claude AI helped a security researcher uncover a flaw in Front Gate Tickets that could have allowed unlimited VIP tickets for ...

The Transportation Security Administration (TSA) will sunset the Known Crew Member (KCM) screening program for aircrew in the ...

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your ...

Prompt injection is the technique of smuggling instructions to an AI agent through content the agent reads — a document, a calendar invite, a web page, a code comment — so that hostile text carries ...

Hackers are targeting sensitive information stored in the LiteLLM open-source large-language model (LLM) gateway by exploiting a critical vulnerability tracked as CVE-2026-42208. The flaw is an SQL ...

Deploy DVRTC only on isolated, dedicated systems. Do not run it alongside production workloads or sensitive data. Expect weak credentials, exposed services, and vulnerable behavior by design. DVRTC ...

Researchers at red-team security startup CodeWall say their AI agent hacked McKinsey's internal AI platform and gained full read and write access to the chatbot in just two hours. It's yet another ...