By exploiting how AI coding agents retrieve and verify plugins, researchers were able to execute malicious code even when the agent was told to use a trusted, approved version.

A new phishing kit abuses a legitimate Microsoft device authorization flow intended for use with printers or smart TVs to steal authentication tokens, register attacker-controlled devices and gain ...

Although it is no longer issuing weekly bulletins, CISA will continue to issue other information through its Known Exploited Vulnerabilities (KEV), its Cybersecurity Alerts and Advisories and its ...

Under active exploitation, the 10.0 Identity Services Engine vulnerability can give attackers root privileges without authentication.

Hosting open-weight AI models locally can offer enterprises more control — unless an AI agent decides to change the model ...

A range of AI trust, guardrail, and red-teaming platforms is emerging to help control and secure the LLMs and agents deployed ...

“A distinct AI assurance layer is likely to emerge, but enterprises should not expect a single certification to establish ...

OpenAI has published six new reports detailing AI model misalignment, including instances of hidden instructions, ...

AI is becoming the biggest destination for new security dollars, but spending remains uneven and strongest among ...

Cisco released emergency patches for a critical vulnerability in its Secure Email Gateway appliance that could allow ...

Enterprises have spent years worrying about what employees put into AI. The Watson Grinding litigation shows why they also ...

The security update addresses 673 patches across 17 product families, including five CVSS 10.0 flaws and 13 rated 9.9 in ...