AI agents can discover local credentials and inherit their permissions, while GitGuardian found 24,008 secrets in public MCP ...

Microsoft details a million-email CEO fraud campaign and passkey-themed attacks that compromised cloud accounts and enabled ...

AI-related SOC alerts rose 685% from February to June 2026, with 94.1% classified as noise and 5.8% as genuine security risks ...

Anthropic says threat actors used Claude in autonomous cyber operations, including reconnaissance, exploitation, and data ...

A report links OpenAI agents to a RubyGems campaign that abused RubyDoc for RCE and published more than 2,000 packages in May ...

Attackers chained two JFrog Artifactory flaws on unupdated servers to gain admin control, while a third flaw was exploited ...

China-linked UNC3569 exploited a Sogou Input Method flaw to deploy GRAYRABBIT; Tencent fixed the issue in version 16.3.0.3498 ...

A WeChat worm demo took over iPhone and Android accounts through incoming calls from existing contacts; Calif says Tencent ...

CISA adds five exploited flaws in Artifactory, ScreenConnect, and RouterOS to KEV, with fixes due by September 25.

Anthropic says China-based AI labs ran illicit Claude distillation campaigns using proxy networks, fake accounts, and ...

A suspected Russian-speaking actor used AI-assisted workflows to exploit PaperCut flaws and compromise at least 440 instances ...

Cisco says three threat clusters exploited two patched FMC flaws to gain access, steal credentials, and deploy Qilin ...