AI agent exploited Salesforce sites; 263 objects, 55 Apex methods exposed at one portal, leading to PII and file leaks.

Researchers have uncovered a supply-chain attack that hides in Python packages, propagates like a worm, and tricks LLM-based ...

Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud ...

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI ...

A China-linked espionage group lived inside corporate cloud accounts for a year and a half by stealing trust instead of ...

The smartest way to use AI may not be letting it touch your files, but asking it to write software that handles them safely - ...

Weekly ThreatsDay recap: old bugs, fake tools, shady payload tricks, AI mishaps, and the usual reminder that the internet is ...

Python scripts were used to test malware against endpoint detection and response agents from Sophos, CrowdStrike, and Windows ...

A threat actor is using an AI-built ransomware attack toolkit that automates Active Directory discovery and helps evade ...

A threat actor has been observed using AI coding tools to develop and refine malware designed to slip past endpoint detection ...

AI vs AI cybersecurity arrived in documented form on May 10, when an LLM agent drove a four-pivot intrusion to database exfiltration in under an hour with no human direction. CrowdStrike data puts ...

Perplexity launches Bumblebee: How its new read-only dev scanner differs from Chainguard ...