China-linked Amaranth-Dragon and Mustang Panda target Southeast Asian governments using WinRAR exploit and PlugX phishing ...

Leaked non-human identities like API keys and tokens are becoming a major breach driver in cloud environments. Flare shows ...

A high-severity OpenClaw flaw allows one-click remote code execution via token theft and WebSocket hijacking; patched in ...

A hacking campaign took just days to exploit a newly disclosed security vulnerability in Microsoft Windows version of WinRAR, ...

The preprint, To Defend Against Cyber Attacks, We Must Teach AI Agents to Hack, released on arXiv, challenges the prevailing ...

Adversaries weaponized recruitment fraud to steal cloud credentials, pivot through IAM misconfigurations, and reach AI ...

Attackers exploited Hugging Face’s trusted infrastructure to spread an Android RAT, using fake security apps and thousands of ...

Too slow react-ion time Baddies are exploiting a critical bug in React Native's Metro development server to deliver malware ...

As AI shifts from helpful copilot to independent operator, enterprises are discovering that identity—not networks or ...

Cranium AI, a leader in AI security and AI governance, today announced the discovery of a high-to-critical severity exploitation technique that allows attackers to hijack agentic AI coding assistants.

After changing its name from Clawdbot to Moltbot to OpenClaw within days, the viral AI agent faces security questions and a ...

From Clawdbot to OpenClaw: This viral AI agent is evolving fast - and it's nightmare fuel for security pros ...