A new benchmark study found AI agents remain vulnerable to prompt injection attacks as companies increasingly roll out the ...
Researchers warn Agentjacking can abuse Sentry errors to make AI coding agents run malicious code on developer machines.
This is probably the dictionary illustration for "deceptively simple." ...
Researchers say current AI agents fail to consistently resist prompt injection attacks, exposing enterprises to failures that ...
Chrome's WebMCP guidance warns that AI agents can be manipulated through the tools they are built to trust.
Tenet Security researchers reveal how new “agentjacking” attacks could trick coding agents into executing arbitrary code ...
The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel ...
A threat actor tracked as DriveSurge has been operating large-scale malware distribution campaigns using ClickFix and ...
Researchers warn CVE‑2026‑26980, a critical SQL injection flaw in Ghost CMS (score 9.4), is being exploited in a large ClickFix campaign; Over 700 domains, including Harvard, ...
Lazarus Group has deployed RemotePE, a fully memory-resident trojan that is extremely hard for traditional antivirus and forensic tools to detect.
A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows. The campaign was ...
AI agents are now being weaponized through prompt injection, exposing why model guardrails are not enough to protect enterprise data. Last week, researchers at Google and Forcepoint reported that ...