Laundry Bear exploits security flaw in unpatched Zimbra servers, stealing 90 days of emails and authentication data without ...

Greatness PhaaS adds device code phishing to bypass MFA and steal OAuth tokens alongside AiTM and consent abuse.

Three weeks after a Gemini Flash release that couldn't produce a working file, Google's budget tier zero-shots a playable ...

Large language model (LLM) hallucinations are becoming a profitable side business for cybercriminals. They prod the AI models ...

Twelve datasets and evaluation systems, built by hand from thousands of real-world security flaws, give model builders and ...

Bitsight researchers say some cheap H96 Android TV boxes may secretly click ads and route strangers' internet traffic through ...

Tuya Smart recently launched Tuya AI Coding, an AI-native no-code platform that lets non-technical users generate deployable, ...

AI is helping attackers create disposable phishing infrastructure and rapidly evolving toolkits that blocklists cannot track ...

Agents need fast, fresh, real-world data to stay grounded and avoid errors. Microsoft’s new grounding service helps solve ...

SMOKE#SCREEN uses fake Adobe and Zoom updates, document lures, and trusted cloud services to install ScreenConnect for persistent remote access.

A single AI-assisted researcher discovered the massive blast-radius vulnerabilities using fewer than 20 prompts on publicly available models in less than 24 hours.

As privacy and data concerns surrounding AI continue to grow, Anthropic’s Claude AI has found itself in the hot seat after private conversations users had shared became accessible through search ...