Collaborate Disseminate
AI agents are no longer just writing code. They are executing it.
Tools like Copilot, Claude Code, and Codex can now build, test, and deploy software end-to-end in minutes. That speed is reshaping engineering—but it’s also creating a security gap most … Continue reading [Webinar] Securing Agentic AI: From MCPs and Tool Access to Shadow API Key Sprawl
Cybersecurity researchers have disclosed details of a previously undocumented and feature-rich malware framework codenamed VoidLink that’s specifically designed for long-term, stealthy access to Linux-based cloud environments
According to a new report … Continue reading New Advanced Linux VoidLink Malware Targets Cloud and container Environments
Old Playbook, New Scale: While defenders are chasing trends, attackers are optimizing the basics
The security industry loves talking about “new” threats. AI-powered attacks. Quantum-resistant encryption. Zero-trust architectures. But looking around, it… Continue reading What Should We Learn From How Attackers Leveraged AI in 2025?
ServiceNow has disclosed details of a now-patched critical security flaw impacting its ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform arbitrary actions as that user.
The vulnerability, tracked a… Continue reading ServiceNow Patches Critical AI Platform Flaw Allowing Unauthenticated User Impersonation
Cybersecurity researchers have disclosed details of a new campaign dubbed SHADOW#REACTOR that employs an evasive multi-stage attack chain to deliver a commercially available remote administration tool called Remcos RAT and establish persistent, covert … Continue reading New Malware Campaign Delivers Remcos RAT Through Multi-Stage Windows Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned of active exploitation of a high-severity security flaw impacting Gogs by adding it to its Known Exploited Vulnerabilities (KEV) catalog.
The vulnerability, tracked as CVE-2025… Continue reading CISA Warns of Active Exploitation of Gogs Vulnerability Enabling Code Execution
Threat actors have been observed uploading a set of eight packages on the npm registry that masqueraded as integrations targeting the n8n workflow automation platform to steal developers’ OAuth credentials.
One such package, named “n8n-nodes-hfgjf-irtu… Continue reading n8n Supply Chain Attack Abuses Community Nodes to Steal OAuth Tokens
This week made one thing clear: small oversights can spiral fast. Tools meant to save time and reduce friction turned into easy entry points once basic safeguards were ignored. Attackers didn’t need novel tricks. They used what was already exposed and … Continue reading ⚡ Weekly Recap: AI Automation Exploits, Telecom Espionage, Prompt Poaching & More
A new wave of GoBruteforcer attacks has targeted databases of cryptocurrency and blockchain projects to co-opt them into a botnet that’s capable of brute-forcing user passwords for services such as FTP, MySQL, PostgreSQL, and phpMyAdmin on Linux server… Continue reading GoBruteforcer Botnet Targets Crypto Project Databases by Exploiting Weak Credentials
Anthropic has become the latest Artificial intelligence (AI) company to announce a new suite of features that allows users of its Claude platform to better understand their health information.
Under an initiative called Claude for Healthcare, the compa… Continue reading Anthropic Launches Claude AI for Healthcare with Secure Health Record Access