From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

Microsoft is extending Dataverse into coding-agent marketplaces while expanding its MCP tools, certification program and governance controls.

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit, ...

The fantasy genre has produced many acclaimed classics, but only movies like Pan's Labyrinth and Spirited Away are worthy of ...

A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code ...

Rogue Agent, a vulnerability in Google Cloud Dialogflow CX, allowed attackers to control agents and exfiltrate sensitive data.

Zscaler found attackers using SEO poisoning and hidden prompts in malicious websites to manipulate AI agents into making cryptocurrency payments.

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Mozilla 0DIN’s Claude Code demo shows how clean GitHub repos can expose AI coding agents to prompt injection, reverse shells, and credential risk.

Utility scams are becoming harder to spot — and more expensive to fall for. In the first half of 2026 alone, victims of utility-related scams lost an average of $969 each for a total of $211,000 in ...

Mozilla’s Zero Day Investigative Network (0DIN) has demonstrated a new attack technique that could allow seemingly harmless GitHub repositories to compromise developers using AI-powered coding ...