Microsoft Patch Tuesday July 2026 delivers 622 CVEs, the largest release in company history, with two exploited zero-days in ...

Prompt injections, the malicious commands attackers embed into content to entice LLMs to follow them, have been attackers’ go ...

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...

Threat researchers at cloud security firm Sysdig have disclosed what they describe as the first documented ransomware operation carried out end-to-end by an autonomous AI agent, with no human typing ...

Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the Node ...

Researchers developed an auditing technique to test generative AI models for malicious capabilities without prompting them ...

Cloud security firm Sysdig has documented what it says is the first ransomware attack carried out from initial exploitation through encryption by an autonomous AI agent, without a human directing each ...

Simon Willison] ported the Moebuis 0.2B image inpainting model to run locally in a web browser.  The web tool simply requires ...