DeadLock ransomware uses Polygon smart contracts, Session, and blockchain-hosted leak content to make extortion infrastructure harder to disrupt.

The type confusion vulnerability allows a guest-to-host sandbox escape which can lead to remote code execution ...

Isolated-vm's ExternalCopy type confusion lets sandboxed code corrupt host memory and potentially reach host RCE; fixes are ...

The Cryptographic Context Injection is only the latest example of the disadvantage LLM defenders operate under. Every time ...

AI is helping attackers create disposable phishing infrastructure and rapidly evolving toolkits that blocklists cannot track fast enough. Push Security explains why browser-level, technique-based ...

Adversa AI says Grok still leaks user names, location, and full chat history to attackers hiding encrypted commands on a web ...

Beacon, a CRM provider for charities and nonprofits, says an AWS access key "potentially exposed in public JavaScript build artifacts" is the leading suspect in its July breach.

Researchers say the new ‘Cryptographic Context Injection’ technique conceals malicious instructions until they are decrypted inside a trusted execution environment.

Claude Mythos Preview discovered new attacks in testing against weakened cryptographic algorithms, which protect online financial transactions, private communications and more. By Dustin Volz ...

On Thursday, Google’s Threat Intelligence Group (GTIG) said it's now tracking two other suspected Russian groups, UNC7005 and ...

Enterprises building agentic systems need to perform continuous testing to ensure their AIs remain on task. This emerging ...

OpenAI is expanding access to its cyber AI models through approved partners, with added verification, monitoring, and human ...