Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.

Adversa says encrypted prompt injection can make Grok send a user's name, location, tier, and chat prompts to an ...

WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader uses Teams phishing to steal Windows login ...

Researchers say the new ‘Cryptographic Context Injection’ technique conceals malicious instructions until they are decrypted inside a trusted execution environment.

AI agent tool bypass vulnerability CoreBreak exposed production agent infrastructure at AWS, Google, and Vercel, where attackers could invoke tools without any model turn. AWS fixed its managed ...

This article lists the top 10 Windows installation pitfalls for AI agents and how to fix them. If you face issues with AI ...

Federal agencies have until August 7, 2026, to remediate or disconnect assets affected by a critical vulnerability in IBM Langflow, tracked as CVE-2026-9198. This mandate follows the inclusion of the ...

NCC Group's July threat report highlights Jadepuffer, an AI-driven ransomware operation that can carry out much of an attack without a human directing every step. Jadepuffer can change tactics when an ...

Claude Code Auto Mode can run malware via a malicious ZIP despite safety checks. Read what the exploit reveals ...

Gemini Spark vs Hermes Agent vs OpenClaw compared for 2026: security, pricing, killer features, and verdicts for power users, ...

CISA has added CVE-2025-62593, a code-injection flaw in the open-source Ray AI framework, to its Known Exploited Vulnerabilities catalogue.

SPECTRE backdoor, deployed by Chinese-speaking hacker group UAT-10147, blinds CrowdStrike Falcon, SentinelOne, and Microsoft ...