Attackers planted web shells through Collabora's Built-in CODE app while its document server was down; versions before 26.4.303 are affected.
MITRE released ATT&CK v20 on October 13, adding nine Enterprise techniques that describe how attackers may target AI systems, ...
Microsoft's latest update expands agent management, adds cross-platform sandboxing and lets developers pick up AI conversations started in other apps.
AI agent safety production: Microsoft Azure Networking engineer Arun Malik publishes a four-layer architectural framework ...
CyberXero's Claude Code-assisted campaign accessed 429 WordPress admin panels and exfiltrated over 628,000 records from four ...
A Docker product manager deliberately hacked himself to prove a point: Claude Code, running natively on his Mac, surfaced real bank account ...
When you entrust tasks to AI agents like Codex, GitHub Copilot, or Claude Code, the AI will rewrite files and execute ...
It's (probably) safer by design as well ...
Microsoft Threat Intelligence identified and tracked exploitation of CVE-2026-73570, an unauthenticated OS command injection vulnerability in the Zimbra Collaboration Suite SNMP notification path.
Background and Design RequirementsThere is an increasing demand to safely use coding agents not only on local terminals but ...
Attackers are increasingly targeting the management systems used to control enterprise infrastructure, with several critical vulnerabilities actively exploited before or shortly after vendors ...
Palo Alto Networks’ Unit 42 researchers have demonstrated how an indirect prompt-injection attack against AWS’ AgentCore Harness could be used to extract plaintext credentials managed by AgentCore ...