Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted ...

Threat researchers at cloud security firm Sysdig have disclosed what they describe as the first documented ransomware operation carried out end-to-end by an autonomous AI agent, with no human typing ...

JadePuffer exploited a vulnerable Langflow server, harvested credentials, moved laterally, and encrypted more than 1,300 ...

Developers get unrestricted access to thousands of nearly CVE-free images from the Minimus catalog of distroless, hardened ...

a laptop screen with a webpage of the IT Army of Ukraine group of volunteer hackers. The IT Army of Ukraine first set up in the wake of Russia's devastating attack, and has since hugely grown in ...

AI agent security now has a purpose-built open-source guardrail: Ant Group released SingGuard-NSFA, a free framework that catches prompt injection and credential-theft patterns before AI agents ...

CISA is one of around 100 organizations approved to use Anthropic’s Mythos model, which is far better than human penetration ...

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a recent data leak in which a contractor published dozens of internal CISA credentials — including AWS Govcloud ...

CISA said it "missed" an opportunity to get ahead of the security incident by not creating a response plan ahead of time.

Denver-based Luxonis Holding Corp. announced Thursday it raised $14 million in early-stage funding to transform industrial automation with cameras and machine vision, providing a perception layer for ...

CISA confirmed on Monday that ransomware gangs have begun exploiting a high-severity Microsoft Defender privilege escalation vulnerability that has previously been abused in zero-day attacks. Dubbed ...

This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...