Overview of the August 2025 Salesloft incident: attackers abused Drift OAuth tokens to exfiltrate Salesforce data, ...

Writer's new AI harness study cuts enterprise token spend by 38% and cost per task by 41% across six foundation models, ...

HollowGraph uses Microsoft 365 calendar events dated to 2050 to receive commands and exfiltrate encrypted files through ...

The standard defines a common way for software, platforms and AI applications to discover, access and understand ...

ServiceNow CVE-2026-6875, a critical unauthenticated RCE in the AI Platform, is under active exploitation. Threat ...

By chaining an SQL injection and an API vulnerability, attackers can inject code. WordPress has released an update, the ...

One unified REST API and a 24-tool MCP gateway power AI-native search, data quality, agentic feeds, and virtual try-on; ...

A researcher who discovered a critical vulnerability in WordPress has used OpenAI’s latest model to develop an exploit chain ...

RavenPack today launched the Tokenisation of Content on Bigdata.com, the first platform where AI agents retrieve, license, ...

An autonomous AI agent breached Hugging Face for a weekend undetected, and safety guardrails blocked defenders' own forensic ...

Three malicious RubyGems packages in the SleeperGem attack skip CI runners, target developer machines, and install persistent ...

Anthropic detailed to the U.S. Senate Banking Committee on June 10 what it called the largest known distillation attack on ...