It's not even your browser's fault.

Hackers are exploiting a maximum-severity vulnerability, tracked as CVE-2025-59528, in the open-source platform Flowise for ...

Threat actors can use malicious web content to set up AI Agent Traps and manipulate, deceive, and exploit visiting autonomous ...

Infosecurity outlines key recommendations for CISOs and security teams to implement safeguards for AI-assisted coding ...

A threat actor has used 36 malicious NPM packages posing as Strapi plugins to distribute malware targeting Redis, Docker, and ...

As enterprises rely more heavily on AI technologies and services, attackers’ living-off-the-land techniques have evolved to ...

The maintainers of the popular Axios HTTP client have published a detailed post-mortem describing how one of its developers ...

This is GlassWorm: a software supply chain attack that security researchers are calling one of the most sophisticated and ...

Webinar series addresses widening gap between AI adoption and AI risk management This series brings together the people ...

A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...

This report makes clear that technical prompt injections aren’t a theoretical problem, they’re a real and immediate ...

Google Threat Intelligence Group warns of active supply chain attack on npm’s Axios library Malicious dependency ...