Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.

A multi-tenant authentication gap in Microsoft’s AI operations agent exposed live command streams, internal reasoning, and ...

Cybersecurity researchers have uncovered a Belarus-based software platform which is helping SIM farm operators support cybercrime on an “industrial scale.” In a new report published yesterday on April ...

The Maritime Transportation Security Act (MTSA) requires plans to protect OT systems, audits by independent third parties, ...

Google launches AI agent suite at Cloud Next 2026 with Workspace Studio, A2A protocol at 150 orgs, and Project Mariner. The pitch: only Google owns the full stack.

Hackers are exploiting a critical vulnerability in Marimo reactive Python notebook to deploy a new variant of NKAbuse malware ...

The CVSS‑9.3 vulnerability allows unauthenticated remote code execution on exposed Marimo servers and was exploited in the wild shortly after disclosure, Sysdig says.

Between December 2025 and February 2026, a lone attacker used Anthropic's Claude and OpenAI's GPT-4.1 to breach nine Mexican ...

Discover how a hacker exploited Claude and ChatGPT to breach government agencies. Learn about the AI-driven tactics used to ...

Is it time to go green?

FANUC America has unveiled the CRX-3iA, the newest addition to its collaborative robot lineup that brings unprecedented ...

Economist Scott Cunningham showed the Fed how AI agents can replicate studies for $11—and why the same tools could erode the ...