An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...

A single misconfigured server has exposed the complete toolkit of an active a three-actor phishing ecosystem. According to ...

An exposed WP-SHELLSTORM server revealed tools, logs, cloud credentials, and thousands of webshells used in a large website ...

Microsoft is extending Dataverse into coding-agent marketplaces while expanding its MCP tools, certification program and governance controls.

Ethereum gossipsub vulnerability CVE-2026-34219 lets any unauthenticated peer crash a validator with a single crafted PRUNE ...

JadePuffer, a ransomware operation, used an AI agent to carry out much of the intrusion chain from reconnaissance, key theft, ...

Indirect prompt injection attacks are now draining cryptocurrency from AI agents in production. Zscaler ThreatLabz documented ...

The bottleneck isn’t the math. It’s the execution. And execution can't be delegated to an innovation committee.

Researchers developed a microscopic theory in which intra-valley, finite-momentum pair-density waves generate the Kekulé ...

According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...

New Helix extortion group steals SharePoint data after compromising Microsoft 365 accounts through voice phishing and MFA abuse.

Airbyte is now available in the OpenAI App Marketplace, enabling users to connect AI agents directly to hundreds of enterprise data sources through Airbyte's growing catalog of connectors. This gives ...