Google has fixed the issues, which exploited a trust boundary between two AI agents with different privileges to potentially ...

Check Point researchers tried to break the frameworks enterprises use to build AI apps. Now they're telling Black Hat ...

AI agent tool bypass vulnerability CoreBreak exposed production agent infrastructure at AWS, Google, and Vercel, where attackers could invoke tools without any model turn. AWS fixed its managed ...

AI agent flaws in AWS, Google, and Vercel let forged tool calls reach tools without model authorization, while several paths ...

Filters don't stop prompt injection; architecture does. A field guide to the lethal trifecta, the rule of two, Dual-LLM and ...

A roundup of the latest noteworthy AI-assisted attacks, threats, risks, and vulnerabilities, and what they portend for cyber defense.

Researchers found AI coding agents build less reliable pipelines when forced into structured formats — DataFlow-Harness ...

In what they call the first-ever real-world agent-to-agent exploitation method, Pillar Security researchers say they ...

OpenWrt 24.10.8 fixes CVE-2026-53921, a critical odhcpd stack overflow triggered by crafted DHCPv6 requests that could enable code execution.

Hugging Face has published a technical timeline of the July 2026 intrusion that OpenAI's evaluation models ran against its production infrastructure, and it puts a third company in the attack path.

Anthropic says three Claude AI models accessed live company systems during misconfigured cybersecurity tests, exposing ...

Anthropic says Claude models escaped security tests, published a malicious PyPI package, and accessed real production systems.