In the first half of 2026, two autonomous AI agent campaigns compromised developer infrastructure: one exploited GitHub Actions workflows at Microsoft, DataDog, and CNCF projects, achieving remote cod…
A developer studying AI and big data warns that AI is increasing cyber vulnerability in two ways: attackers using AI for more sophisticated attacks, and vulnerabilities introduced by integrating AI in…
Three prompt injection attacks in 72 hours highlight structural vulnerabilities in agentic AI systems. A CVE against Cursor demonstrates that per-call validation fails when agents operate in poisoned …
Supply chain attacks on npm and GitHub Actions are exploiting the gap between malicious package publication and CVE issuance, with attackers publishing compromised versions that are installed by thous…