Tenet Security researchers reveal how new “agentjacking” attacks could trick coding agents into executing arbitrary code ...
Three popular plugins served malicious JavaScript through a compromised CDN.
Chrome's WebMCP guidance warns that AI agents can be manipulated through the tools they are built to trust.
Microsoft’s AutoJack research shows how a malicious webpage rendered by an AI browsing agent can reach local MCP services and ...
A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...
Researchers at Cyera found six vulnerabilities in prtobuf.js, including a flaw that can turn attacker-controlled schema data ...
The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel ...
Researchers have uncovered a supply-chain attack that hides in Python packages, propagates like a worm, and tricks LLM-based ...
This is probably the dictionary illustration for "deceptively simple." ...
Microsoft confirms it temporarily removed GitHub repos after Miasma worm compromised 73 of its open-source projects to inject ...
Aware, Inc. (NASDAQ: AWRE), a global leader in biometric orchestration, today announced substantial innovations to the Awareness Platform™. New offerings include expanded biometric ...
At the DASH conference, Datadog presents new features for autonomous IT operations and AI security with Bits AI SRE, AI Guard ...