Cloud security firm Sysdig says it has documented the first ransomware operation carried out entirely by an autonomous AI ...

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted ...

Attackers exploited Langflow vulnerability CVE-2025-3248 to conduct an agentic AI-powered ransomware attack involving reconnaissance, credential theft, and lateral movement.

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

GitHub moved the AI coding landscape on Wednesday when it made Kimi K2.7 Code — a Beijing-built, open-weight model from Moonshot AI — generally available in the GitHub Copilot model picker, marking ...

Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities ...

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...

A SimpleHelp authentication flaw is being exploited to deploy Djinn Stealer, a cross-platform malware targeting cloud, ...

Percona, a provider of open source database software and services, today announced a partnership with HexaCluster, a PostgreSQL migration and services specialist, to help organizations move off ...

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Oracle was previously slated over how it handled MySQL – the company now has a new plan to involve the community.

Oracle has promised a new phase in its custodianship of MySQL following the creation of a lobby group concerned about its ...