ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't ...

Opera GX patched a flaw that let malicious sites silently install GX Mods and leak a signed-in user’s Gmail address with CSS.

A critical flaw discovered in the Opera GX browser could enable malicious websites to automatically install a customization ...

TL;DR Why EN 303 645 matters ETSI EN 303 645 has given consumer IoT security a much-needed baseline. It gives manufacturers, assessors, and product teams a shared view of reasonable IoT security and ...

Discover the AI Agent Safety Directory that evaluates AI agents before deployment with trusted safety ratings, risk insights, and performance benchmarks.

Banks and financial institutions have been warned that AI is empowering scammers and cyber criminals, as the number of ...

Zscaler found attackers using SEO poisoning and hidden prompts in malicious websites to manipulate AI agents into making cryptocurrency payments.

A new prompt injection attack dubbed "BioShocking" could trick AI-powered browsers into treating real-world risky actions as ...

Named after BioShock's 'Would you kindly' mechanic, the attack trains AI agents to accept false information before stealing ...

As enterprises rapidly embrace multimodal AI capable of understanding both text and images, security researchers are discovering that these powerful new capabilities introduce equally sophisticated ...

Attackers have begun embedding hidden instructions in websites to target AI agents, according to new research. Zscaler's ...

Securonix uncovers the Veil#Drop malware framework, which abuses compromised websites and Google Blogspot to deploy the PureLog information stealer.