Google says attackers are using AI for zero-day research, malware development, reconnaissance, and access to premium AI tools ...

Whether you want simple fire-and-forget alerts or full two-way control, here's how to securely wire your AI agent into Slack.

TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...

A cybercriminal group came close to launching a mass attack earlier this year, armed with a software exploit that an AI model ...

Microsoft’s Azure-based AI development and deployment platform shines with a strong selection of models and agent types and ...

Critical out-of-bounds read in Ollama before 0.17.1 leaks process memory including API keys from over 300000 servers via ...

Google's GTIG identified the first zero-day exploit developed with AI and stopped a mass exploitation event. The report documents state actors using AI for vulnerability research and autonomous ...

Organizations need to internalize a simple principle: Calling an LLM API is a data transfer. You're trusting the provider ...

Build Application Firewalls (BAFs) are emerging as a new defense against software supply chain attacks by inspecting ...

Go’s native fuzzing is useful, but it stands far behind state-of-the-art tooling that the Rust, C, and C++ ecosystems offer with LibAFL and AFL++. Path constraints are hard to solve. Structured inputs ...

Over 170 TanStack, Mistral AI, OpenSearch, UiPath, and other packages were affected in a new Mini Shai-Hulud supply chain ...

New research exposes how prompt injection in AI agent frameworks can lead to remote code execution. Learn how these ...