An unknown threat actor exploited a public Marimo notebook via CVE-2026-39987 on May 10, 2026, using a large language model agent to drive post-compromise activity. The intruder extracted cloud creden…
Microsoft warned of an active cryptojacking campaign that uses AI chatbot interactions to surface malicious download sites. The campaign employs SEO-poisoning techniques and embedded "Summarize with A…
Malicious actors are increasingly using artificial intelligence to automate reconnaissance and exploit system vulnerabilities, making Distributed Denial of Service (DDoS) attacks faster, stronger, and…
On 20 May 2026, GitHub confirmed that approximately 3,800 internal repositories were exfiltrated after an employee installed a poisoned code editor extension that handed attackers credentials and clou…