Cybercriminals use ErrTraffic tool to automate malware distribution through fake browser error messages, with attacks ...

In April 2023, Samsung discovered its engineers had leaked sensitive information to ChatGPT. But that was accidental. Now imagine if those code repositories had contained deliberately planted ...

A critical LangChain Core vulnerability (CVE-2025-68664, CVSS 9.3) allows secret theft and prompt injection through unsafe ...

From data poisoning to prompt injection, threats against enterprise AI applications and foundations are beginning to move from theory to reality.

That's apparently the case with Bob. IBM's documentation, the PromptArmor Threat Intelligence Team explained in a writeup provided to The Register, includes a warning that setting high-risk commands ...

VVS Stealer is a Python-based malware sold on Telegram that steals Discord tokens, browser data, and credentials using heavy ...

Star Wars Racer Revenge is listed on eBay for hundreds of dollars more than its original price because of its use in a new ...

Apache Commons Text is used for processing character strings in Java apps. A critical vulnerability allows the injection of malicious code.

At 39C3, Johann Rehberger showed how easily AI coding assistants can be hijacked. Many vulnerabilities have been fixed, but ...

The Pharmacy and Poisons Board (PPB) has issued a public alert warning of falsified SIMULECT (basiliximab), a medication ...

In a dissenting opinion, one judge argued that the bill reduces the governor’s choice to “selecting the least objectionable ...

Researchers at Pen Test Partners found four flaws in Eurostar's public AI chatbot that, among other security issues, could allow an attacker to inject malicious HTML content or trick the bot into ...