Dependency confusion is a supply chain issue that affects how package managers choose where to download a dependency from. If your build or developer tooling can see both a private package registry ...

A roundup of the latest noteworthy AI-assisted attacks, threats, risks, and vulnerabilities, and what they portend for cyber defense.

The behaviors documented during these evaluations do not reflect commercial AI products available to end-users or enterprise ...

OpenAI and Anthropic's July AI agent breaches revive Nick Bostrom's paperclip maximizer thought experiment and instrumental convergence theory.

It's far easier to find security holes than to fix them, and leaving it to AI can introduce 9 times as many new ...

As AI agents gain autonomy inside enterprises, the biggest cybersecurity threat may no longer be hackers, but the agents ...

Arch Linux AUR malware has forced an emergency adoption freeze after Wave Three of the Atomic Arch campaign deployed a ...

Google rolled back Nano Banana 2's image generator in Google Earth late last week, just one day after its launch. Users had ...

Filters don't stop prompt injection; architecture does. A field guide to the lethal trifecta, the rule of two, Dual-LLM and ...

A leaked n8n API key is only the start. GitGuardian's research traces the full chain, from exposed tokens and weak keys to ...