Hunt.io and security researcher Bob Diachenko discovered an exposed server in Hong Kong that revealed an active intrusion attempt against Thailand's Ministry of Finance between July 9 and July 13, 202…
Anthropic resolved a multi-model Claude outage on July 29 after elevated errors disrupted Claude.ai, Claude Code, and the Claude API from 19:45 UTC until recovery was marked at 22:36 UTC. The company'…
OpenAI reset usage limits and lifted the five-hour cap for ChatGPT Plus, Business, and Pro subscribers after GPT-5.6 Sol drained allowances faster than expected, with product lead Thibault Sottiaux an…
Microsoft's July 2026 Patch Tuesday fixed 570 security vulnerabilities, including two zero-days, driven by AI-powered vulnerability discovery using its Codename MDASH multi-model agentic scanning harn…
Threat intelligence company Hunt.io and security researcher Bob Diachenko discovered that a threat actor used the open-source Hermes AI agent in unattended "YOLO" mode to automate post-exploitation ac…
A Bing malvertising campaign used a malicious public Claude Artifact hosted on Anthropic's legitimate claude.ai domain to distribute the SectopRAT remote-access trojan, compromising at least 29 organi…
Pillar Security found that four top AI coding agents — Cursor, OpenAI's Codex, Google's Gemini CLI, and Antigravity — can be made to cross their security boundaries via prompt injection, without techn…
Microsoft's July 2026 Patch Tuesday shipped 570 vulnerabilities, nearly triple the previous record of 198, after the company deployed MDASH, an AI system running more than 100 specialized agents conti…
Microsoft's July 2026 Patch Tuesday fixes a record 570 vulnerabilities, a 316% increase from July 2025, driven by its new AI-powered MDASH system. Three zero-days are included, with two actively explo…
ASSET Research Group and Sudipta Chattopadhyay published a proof-of-concept attack called Ghostcommit that hides a prompt-injection instruction inside a PNG image, passes AI code review, and later ind…
Researchers at the University of Missouri-Kansas City developed 'Ghostcommit', an attack that hides prompt injection instructions inside PNG images to trick AI code reviewers into approving malicious …
Anthropic will end free access to Claude Fable 5 for Pro, Max, Team, and Enterprise plan subscribers on July 8, requiring usage credits for continued use. The model will cost $10 per million input tok…
Security firm Sysdig documented the first fully agentic ransomware attack, dubbed JadePuffer, in which an AI agent planned and executed an entire database-extortion operation with no human at the keyb…
Mozilla's 0DIN researchers demonstrated a proof-of-concept exploit that uses a clean GitHub repository to trick Anthropic's Claude Code agent into executing a reverse shell, compromising developer sys…
Threat actors are creating fraudulent OpenAI tenants impersonating legitimate cybersecurity companies and sending legitimate-looking invitations to employees, aiming to trick them into submitting sens…
Microsoft quietly extended its free Windows 10 Extended Security Updates (ESU) program for consumers by an additional year, now covering security updates until October 12, 2027. The change was made wi…
Varonis Threat Labs disclosed SearchLeak, a three-stage vulnerability chain in Microsoft 365 Copilot Enterprise that can exfiltrate emails, MFA codes, calendar items, SharePoint and OneDrive files via…
Varonis Threat Labs disclosed a critical vulnerability chain called SearchLeak in Microsoft 365 Copilot Enterprise that could allow attackers to exfiltrate emails, MFA codes, and files via a one-click…
OpenAI is testing a new subscription called ChatGPT for Science, aimed at scientific and academic use cases, according to reports from BleepingComputer and TugaTech. The subscription is linked to Open…
Aikido Security identified at least 15 malicious plugins on the JetBrains Marketplace that steal AI provider API keys from developers, with close to 70,000 total installs. The plugins, targeting DeepS…