Cybersecurity news — data breaches, vulnerability disclosures, AI-powered security tools, threat intelligence, and enterprise security research.
The use of unauthorized artificial intelligence tools, known as "Shadow AI," in the workplace has increased fourfold over the past year. It states that employers are becoming increasingly unaware of this unapproved AI us…
"Copy Fail," a dangerous Linux local-privilege escalation vulnerability that exploits a kernel memory corruption flaw to provide a controlled 4-byte write into the Linux page cache. This allows attackers to rewrite cache…
According to a 2025 report by HPE Threat Labs, cybercriminals have industrialized their operations by using automation and AI to exploit vulnerabilities at greater scale and speed, often adopting corporate hierarchies to…
Cloudflare and Anthropic have partnered to integrate Claude Managed Agents with Cloudflare Sandboxes, giving developers more control over agent infrastructure, security, and observability. The integration allows the core…
The article announces the launch of a new, open-source forum software called "bsBB" that combines a nostalgic, old-school forum structure with modern features. It replaces traditional user authentication with Bluesky acc…
On May 11, 2024, TanStack suffered a sophisticated supply-chain attack that compromised 42 npm packages and published 84 malicious versions within six minutes. The attackers exploited GitHub Actions cache poisoning and u…
Security vulnerabilities found in Epsilon, a WebAssembly (WASM) runtime written in Go. AI agents discovered over 20 security flaws, including sandbox escapes that allowed malicious WASM modules to break isolation and acc…
User-space security agents are structurally flawed because they share the same privilege level as the processes they monitor, allowing attackers with root access to simply kill the agent or erase logs. It explains that e…
Based solely on the provided text, the article's title indicates that the graduating class of 2026 is tired of hearing about artificial intelligence. The body of the article does not contain any information about this to…
Everyday devices like refrigerators can pose national security risks due to their vulnerability to cyberattacks. CrowdStrike’s Global Threat Report reveals that 281 known adversaries are using AI, cloud exploits, and soc…
Microsoft's AI-powered Copilot and the controversial "Recall" feature, which continuously captures snapshots of user activity, have sparked intense backlash from cybersecurity experts and privacy advocates who question w…
Relying on autonomous OSINT (Open Source Intelligence) AI agents, which are gaining popularity in Japanese security communities, leads to "skill atrophy" among human analysts. It describes a "Skeleton Implementation" pro…
Claude Code automatically scans project files, including `.env` files containing sensitive credentials like database passwords and API keys, as soon as a project is opened. A GitHub issue confirmed that Claude reads and …
PyTorch's `torch.load()` function uses the Python pickle format for serialization, which inherently executes arbitrary code when loading a file, making it trivially exploitable for remote code execution (RCE) attacks. Th…
A 2026 VentureBeat survey of 40 enterprises found that 72% believe they have meaningful control over their AI deployments, yet most organizations lack governance over what their AI agents spend. The article identifies a …
Practical starting point for security teams new to AI red-teaming, emphasizing that the process requires structured preparation distinct from traditional security testing. It highlights prompt injection (both direct and …
The Shai-Hulud, a self-replicating AI worm that spreads through LLM-powered systems by embedding adversarial prompts in external content, has had its source code publicly released. This development lowers the barrier for…
A Brazilian labor court (TRT8) fined two attorneys approximately R$84,000 for prompt injection, marking one of the first known judicial sanctions for manipulating AI systems in legal proceedings. The lawyers submitted in…
AI coding agents are evolving from simple autocomplete tools into long-running, autonomous systems that can execute complex developer workflows, such as reading files, running tests, and making multi-step decisions. Howe…
Researchers have demonstrated that adversarial commands can be hidden within audio that sounds normal to humans—using ultrasonic frequencies or psychoacoustic masking—and voice AI transcription pipelines will faithfully …