A groundbreaking ransomware attack, JadePuffer, has been identified, fully executed by an autonomous AI agent without human ...

A newly identified ransomware campaign named JadePuffer represents a significant advancement in cyberattacks, as it operates ...

The FBI warned that TeamPCP software supply chain attacks targeted developer tools to steal cloud credentials, SSH keys, and ...

Anthropic’s Claude models are now generally available in Microsoft Foundry, giving Azure developers and enterprise application teams another major frontier model option inside Microsoft’s cloud AI ...

Anthropic's Claude family of AI models is now generally available in Microsoft Foundry on Azure, giving enterprise developers another frontier model they can deploy, manage and govern through ...

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

The biggest question now is which workflow will help you get something into production fast, not which cloud provider to use.

SearchLeak and a three-CVE LiteLLM chain broke the same AI trust boundary in two weeks. A 5-check audit maps each gap to a ...

AI language models can be secretly trained to steal credentials when triggered by a specific phrase. Here's what the research shows, why safety training can't stop it, and where the $414M AI security ...

They're not bad; they're just prompted that way. Sysdig threat hunters documented what they say is the first-ever documented ...

Malicious npm packages mimicking Rollup polyfill tooling steal browser data, crypto wallets, and AI tool credentials in a Lazarus-linked campaign.

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.