A malicious instruction file sitting in a developer’s Downloads folder tried to make their AI coding agent install a known-malicious npm package, security firm Forever Security said in a report published last… Read More »Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
Threat actors have been observed using agentic artificial intelligence (AI) platforms for post-exploitation activity following the abuse of the PHP2Shell vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619. “In one case, the… Read More »PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking
A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings… Read More »Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inference of its most advanced AI models.… Read More »OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
Google has updated its privacy policy to spell out that using personalized artificial intelligence (AI) features in Search or Gemini could allow the company to serve targeted ads to users… Read More »Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads
LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious… Read More »Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
A memory-corruption flaw in Google’s Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages, and Envoy proxies set up to decompress Brotli. Tracked as CVE-2026-111497,… Read More »Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 million updates to computers it did not own to switch off a background updater… Read More »Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV),… Read More »CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan,… Read More »BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations