Security vendors and their customers have spent considerable time debating where to draw the line between “legitimate” AI agents and “malicious” bots. A 31-day campaign against a major consumer ...

Microsoft details AutoJack exploit chain targeting AutoGen Studio MCP WebSocket in pre-release builds, enabling ...

Microsoft’s AutoJack research shows how a malicious webpage rendered by an AI browsing agent can reach local MCP services and ...

RSA today announced new RSA Help Desk Live Verify capabilities that stop social engineering attacks by extending coverage for users without a registered authenticator. Announced at Identiverse 2026, ...

Mastra npm packages added easy-day-js malware, exposing developer systems and CI runners to infostealer risks.

FBI warns cyber criminals are using Traffic Distribution Systems to redirect users to phishing sites, malware downloads, ...

Fake Claude Code install sites are pushing malware that steals API keys, developer credentials, crypto wallets, and other sensitive data.

International law enforcement agencies cleaned nearly 15,000 malware-infected WordPress websites and took down more than 100 servers linked to the SocGholish botnet and the Evil Corp Russian ...

Nineteen-year-old ethical hacker Nisarga Adhikary, who recently highlighted security vulnerabilities in CBSE's digital ...

Rubrik FORWARD — Rubrik (NYSE: RBRK) today introduced two new Identity Resilience capabilities to expand its product suite. The first, Identity Continuity is powered by the acquisition of Strata.io, ...

Three popular plugins served malicious JavaScript through a compromised CDN.

Nineteen-year-old ethical hacker Nisarga Adhikary, who recently highlighted security flaws in CBSE's digital infrastructure, has been appointed as an OSINT and Threat Intelligence Engineer at IIT ...