Google has fixed the issues, which exploited a trust boundary between two AI agents with different privileges to potentially ...

Check Point researchers tried to break the frameworks enterprises use to build AI apps. Now they're telling Black Hat ...

AI agent tool bypass vulnerability CoreBreak exposed production agent infrastructure at AWS, Google, and Vercel, where attackers could invoke tools without any model turn. AWS fixed its managed ...

Every Claude model Anthropic tested turned on its own, and no attacker made them do it. Given three agents, four hours on one server, and conflicting orders none knew the others held, the models ...

AI agent flaws in AWS, Google, and Vercel let forged tool calls reach tools without model authorization, while several paths ...

DOUBLECUP hides malware stages in cached PNG files, then uses ClickFix commands to deliver CountLoader variants and the ...

Filters don't stop prompt injection; architecture does. A field guide to the lethal trifecta, the rule of two, Dual-LLM and ...

AI-generated code is accelerating software development, but review processes are not keeping pace. Learn why enterprises need ...

The March 2026 LiteLLM supply chain attack likely affected over 2,500 organizations and exposed over 430,000 CI/CD pipelines.

Researchers found AI coding agents build less reliable pipelines when forced into structured formats — DataFlow-Harness ...

A roundup of the latest noteworthy AI-assisted attacks, threats, risks, and vulnerabilities, and what they portend for cyber defense.

In what they call the first-ever real-world agent-to-agent exploitation method, Pillar Security researchers say they ...