Security researchers broke out of the sandboxes in four widely used AI coding agents, including Cursor, OpenAI's Codex, Google's Gemini CLI and Antigravity, without attacking the sandbox head-on. The ...

The JadePuffer autonomous AI agent has upgraded with custom malware called EncForge that focuses on encrypting AI assets, ...

A malicious component dubbed HollowGraph uses the calendar feature in compromised Microsoft 365 mailboxes as a ...

Choosing an AI SOC platform requires understanding how it will perform in your own environment, not just during an evaluation ...

Microsoft is working to fix a known issue affecting Windows Server Update Services (WSUS) servers, which has caused synchronization problems for more than a week.

Attackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat ...

Researchers escaped the sandboxes in Cursor, Codex, Gemini CLI and Antigravity by having the AI agent write files that trusted host tools later run. Multiple CVEs, patches, and Google downgrading two ...

An advanced threat actor is abusing the update mechanism for the ViPNet private networking product suite to target Russian ...

Bill Toulas is a tech writer and infosec news reporter with over a decade of experience working on various online publications, covering open-source, Linux, malware, data breach incidents, and hacks.

Public exploits have been released for the critical "wp2shell" remote code execution vulnerabilities affecting WordPress Core ...

Microsoft has observed a surge in attacks using the ACR Stealer malware to steal browser-stored passwords, authentication ...

Abbott Laboratories is investigating two separate cybersecurity incidents after confirming unauthorized access to internal ...