Google fixed Rogue Agent, a Dialogflow CX Code Blocks flaw that could let one writable agent affect every chatbot in a Cloud ...

JadePuffer could be the first reported case of a ransomware attack driven by AI from start to finish. How can businesses ...

BeyondTrust warned customers to patch two critical security flaws in its Remote Support (RS) and Privileged Remote Access ...

Securonix uncovers the Veil#Drop malware framework, which abuses compromised websites and Google Blogspot to deploy the PureLog information stealer.

An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt ...

Security researchers say an autonomous AI agent carried out a complete ransomware attack, adapting to failures and executing ...

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...

The DuneSlide vulnerabilities enable zero-click prompt injection attacks that escape Cursor's sandbox and execute arbitrary code on the underlying operating system.

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

CISA added a Microsoft SharePoint RCE flaw to its exploited bugs catalog after confirming active attacks on unpatched servers ...

CISA warned on Wednesday that attackers have begun exploiting a high-severity Microsoft SharePoint remote code execution ...