New Helix extortion group steals SharePoint data after compromising Microsoft 365 accounts through voice phishing and MFA abuse.

Google fixed Rogue Agent, a Dialogflow CX Code Blocks flaw that could let one writable agent affect every chatbot in a Cloud ...

Varonis reported the flaw to Google in late 2025 and it has been addressed, but it reminds defenders to take a look at their ...

Armored Likho BusySnake Stealer, a Python-based infostealer first disclosed by Kaspersky, is actively targeting government ...

Everything you need to know about how we analyzed the 13,000+ comments submitted in the federal government’s request for ...

Alibaba's SkillWeaver framework routes AI agents through massive tool libraries with 99% less token consumption. Here's how ...

Security firm Novee has revealed Cordyceps as a class of exploitable CI/CD vulnerabilities across open-source repositories ...

A new framework called SkillWeaver tackles AI agent tool routing by skipping full-library loading, cutting token use 99% on ...

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your security tools look.

Erik Steiger discusses the operational pain of legacy PDF generation in regulated banking and manufacturing. He explains how ...

RALEIGH, N.C. and ARMONK, N.Y. — IBM and Red Hat today announced the commercial launch of Lightwell, delivering automated vulnerability remediation at scale through two offerings: Lightwell Network ...

These are the projects I recommend building instead of just buying something off the shelf.