By exploiting how AI coding agents retrieve and verify plugins, researchers were able to execute malicious code even when the agent was told to use a trusted, approved version.

Although it is no longer issuing weekly bulletins, CISA will continue to issue other information through its Known Exploited Vulnerabilities (KEV), its Cybersecurity Alerts and Advisories and its ...

A new phishing kit abuses a legitimate Microsoft device authorization flow intended for use with printers or smart TVs to steal authentication tokens, register attacker-controlled devices and gain ...

Under active exploitation, the 10.0 Identity Services Engine vulnerability can give attackers root privileges without authentication.

New tools are exciting, but strengthening baseline capabilities provides a better bang for your security budget. Here are five tips for security leaders looking to make a measurable impact.

Hosting open-weight AI models locally can offer enterprises more control — unless an AI agent decides to change the model ...

A range of AI trust, guardrail, and red-teaming platforms is emerging to help control and secure the LLMs and agents deployed ...

“A distinct AI assurance layer is likely to emerge, but enterprises should not expect a single certification to establish ...

Cisco released emergency patches for a critical vulnerability in its Secure Email Gateway appliance that could allow ...

OpenAI has published six new reports detailing AI model misalignment, including instances of hidden instructions, ...

AI is becoming the biggest destination for new security dollars, but spending remains uneven and strongest among ...

Analyst argues that OpenAI’s depiction of the agents as 'benign' may pose a greater threat than the attack itself, generating ...