Misconfiguration allowed models to reach the internet from testing environments that were supposed to be isolated, AI firm ...

The alleged files include driver's licenses and salary information. A former employee filed suit Wednesday claiming the ...

Amazon Threat Intelligence has tied a DPRK hacking group to four separate NPM package supply chain attacks, including axios. The company’s security teams have connected the axios, debug, chalk, and ...

Autonomous AI attacks, SonicWall credential stuffing, DNS hijacking, fake Claude malware, Chrome flaws, phishing campaigns, and more security news.

Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ...

Russian state hackers are using a maximum-severity vulnerability in Microsoft’s Outlook’s Exchange Server to backdoor ...

OpenAI's rogue models used publicly exposed credentials across "four accounts on four services" to help facilitate the ...

South Korea's required financial security software — the kind millions of citizens install because online banking and government websites demand it — was quietly ...

ThreatLocker raised $190 million in Series F funding to expand zero trust protections against autonomous AI agents while using AI to simplify security administration, policy management and ...

New findings connect the same Pyongyang-backed group to four compromises dating to 2025, revealing a larger operation than ...

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor ...

AI hallucinations are a remarkably easy vector for cyber criminals, who can anticipate hallucinations with hidden malware.