By exploiting how AI coding agents retrieve and verify plugins, researchers were able to execute malicious code even when the agent was told to use a trusted, approved version.

Cisco released emergency patches for a critical vulnerability in its Secure Email Gateway appliance that could allow ...

A range of AI trust, guardrail, and red-teaming platforms is emerging to help control and secure the LLMs and agents deployed ...

Stronger monitoring, shorter-lived tokens, and tighter controls over how tokens are used after authentication are needed as AI agents complicate who and what enterprises can trust inside their systems ...

Enterprises have spent years worrying about what employees put into AI. The Watson Grinding litigation shows why they also ...

Hosting open-weight AI models locally can offer enterprises more control — unless an AI agent decides to change the model ...

Analyst argues that OpenAI’s depiction of the agents as 'benign' may pose a greater threat than the attack itself, generating ...

“A distinct AI assurance layer is likely to emerge, but enterprises should not expect a single certification to establish ...

Attackers are scanning internet-exposed Vite development servers for environment files, cloud credentials and infrastructure ...

A new phishing kit abuses a legitimate Microsoft device authorization flow intended for use with printers or smart TVs to steal authentication tokens, register attacker-controlled devices and gain ...

Microsoft says threat actors posing as IT helpdesk staff are tricking employees into phishing and device-code attacks that ...