Google's security team scanned billions of web pages and found real payloads designed to trick AI agents into sending money, ...

Making headlines everywhere is the CopyFail Linux kernel vulnerability, which allows local privilege escalation (LPE) from any user to root privileges on most kernels and distributions. Local ...

CVE-2026-42208 exploited within 36 hours of disclosure, exposing LiteLLM credentials, risking cloud account compromise.

Antigravity Strict Mode bypass disclosed Jan 7, 2026, patched Feb 28, enables arbitrary code execution via fd -X flag.

New capability intercepts and blocks malicious code at the point of execution, closing the critical gap between vulnerability ...

Security researchers have discovered 10 new indirect prompt injection (IPI) payloads targeting AI agents with malicious ...

The popular Python package for monitoring data quality was briefly available as a malicious version. Provider Elementary ...

New guidance from a coalition of Western governments underscores the difficult-to-predict risks of still-evolving agentic ...

Two papers presented at the recently concluded RSAC security conference describe novel attack vectors on Apple Intelligence. The corresponding vulnerabilities in the area of so-called prompt ...

KnowBe4, the global leader in digital workforce security, securing both AI agents and humans, today announced new research, ...

OX Security confirmed arbitrary command execution on six live platforms and estimates 200,000 MCP servers are exposed. Here's ...

Google has changed Gmail, expanding Gemini to millions of users — just as it warns that this kind of AI upgrade opens the ...