From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

Agent observability, aka AgentOps, has emerged as a vital ecosystem of tools for keeping an eye on what AI agents and LLMs ...

I tested Claude Code, Codex, and OpenCode on real full-stack work: a Next.js feature, a backend bug, a legacy refactor, and ...

Sysdig says JADEPUFFER may be the first agentic ransomware case, exposing how AI agents can turn old credential failures into database destruction. JADEPUFFER is a warning about exposed AI ...

An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt ...

Zscaler found attackers using SEO poisoning and hidden prompts in malicious websites to manipulate AI agents into making cryptocurrency payments.

JadePuffer exploited a vulnerable Langflow server, harvested credentials, moved laterally, and encrypted more than 1,300 ...

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

These third-party projects greatly expand the ways agents and LLMs can draw on facts, documents, and conversations to deliver ...

SentinelOne says macOS.Gaslight uses prompt injection to mislead AI-based malware analysis, steal data, and use Telegram for C2.