MetInfo CMS flaw CVE-2026-29014 exploited after April 7 patch, enabling remote code execution and targeting 2,000 instances.
Threat actors are exploiting critical vulnerabilities in MetInfo CMS and Weaver E-cology for unauthenticated, remote code ...
Grok was tricked by a prompt injection, translating a Morse code message to Bankrbot. Bankrbot then sent 3B DRB tokens to a ...
Making headlines everywhere is the CopyFail Linux kernel vulnerability, which allows local privilege escalation (LPE) from any user to root privileges on most kernels and distributions. Local ...
Six teams exploited Claude Code, Copilot, Codex, and Vertex AI in nine months. Every attack hit runtime credentials that IAM ...
Gemini CLI CVSS 10.0 flaw in versions below 0.39.1 enabled RCE in CI workflows, forcing Google to mandate explicit workspace ...
A flaw in Cursor’s AI agent lets malicious repositories trigger arbitrary code execution through routine Git operations, now ...
Google's security team scanned billions of web pages and found real payloads designed to trick AI agents into sending money, ...
Cybercriminals are tricking AI into leaking your data, executing code, and sending you to malicious sites. Here's how.
Security researchers have discovered 10 new indirect prompt injection (IPI) payloads targeting AI agents with malicious ...
SAN FRANCISCO, April 21, 2026 (GLOBE NEWSWIRE) -- Operant AI today announced the launch of CodeInjectionGuard, a new capability for its Agent Protector product that detects and blocks malicious code ...