AI Now’s Friendly Fire PoC shows Claude Code and Codex running README-planted payloads on hosts when autonomous command ...

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to ...

Rogue Agent, a vulnerability in Google Cloud Dialogflow CX, allowed attackers to control agents and exfiltrate sensitive data.

A prompt injection attack can trick GitHub’s preview Agentic Workflows into retrieving content from private repositories and ...

ESET Research has released its H1 2026 Threat Report with statistics from December 2025 through May 2026.ClickFix – a social engineering ...

In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are ...

Varonis reported the flaw to Google in late 2025 and it has been addressed, but it reminds defenders to take a look at their ...

Google fixed Rogue Agent, a Dialogflow CX Code Blocks flaw that could let one writable agent affect every chatbot in a Cloud ...

JadePuffer could be the first reported case of a ransomware attack driven by AI from start to finish. How can businesses ...

An AI agent carried out the technical execution of a real-world ransomware attack for the first known time, but new details ...

A threat group researchers call "Armored Likho" has gained access to government agencies and electrical power entities in ...

Sysdig's JadePuffer case is billed as the first ransomware attack planned and executed end to end by an AI agent, with no human directing it.