CISA on Thursday ordered government agencies to prioritize patching two actively exploited vulnerabilities in the Fortinet FortiSandbox threat detection platform.

A new malicious framework called OkoBot is delivering more than 20 payloads in attacks focused on stealing cryptocurrency ...

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...

Red, an in-house AI hacker that attacks its own models to harden GPT-5.6 against prompt injection, and it works too well to release.

OpenAI introduced GPT-Red, an automated AI system designed to find vulnerabilities in GPT models before release. The company said GPT-Red was used to train GPT-5.6, reducing failures on one of its ...

The hack allegedly confirms the suspicions of record labels and artists that their music is used in the creation of AI music.

OpenAI has built an LLM super-hacker called GPT-Red that it uses as a sparring partner to help its other models boost their ...

Context bomb cybersecurity research from Tracebit shows that a single hidden text string inside an AWS cloud decoy stopped ...

Microsoft's July security update tackles more than 600 flaws, including multiple critical vulnerabilities and exploited zero-days. The update also begins mandatory Kerberos RC4 enforcement, ...

A new version of RedHook Android malware uses your phone's own built-in debugging tool to take remote control of your device without needing root access or a USB cable.

The Shai-Hulud 2.0 supply chain attacks exposed a structural weakness in enterprise security: how organizations determine ...

Prompt injections, the malicious commands attackers embed into content to entice LLMs to follow them, have been attackers’ go ...