A vulnerability chain dubbed AutoJack in Microsoft's AutoGen Studio interface for prototyping AI agents could let attackers ...

Cordyceps, a systemic class of exploitable CI/CD vulnerabilities, allows unauthenticated attackers to hijack developer ...

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...

Companies must be capable of detecting malicious DLLs and vulnerabilities in software libraries to prevent early-stage ...

The popular product lifecycle management platform is under active exploitation for an RCE vulnerability that could put ...

JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...

This week’s cybersecurity recap covers Firefox and Chrome bugs, EDR-killer tools, a TV botnet, an OpenBSD flaw, Android ...

A malicious npm package has been caught impersonating one of the JavaScript ecosystem's most widely used build tools. The ...