Attackers exploited Langflow vulnerability CVE-2025-3248 to conduct an agentic AI-powered ransomware attack involving reconnaissance, credential theft, and lateral movement.

Our tracking of OceanLotus activities from 2024–2026 reveals a shift in operational focus. During this period, the Vietnam-aligned OceanLotus adopted a more selective approach to external operations ...

Sysdig says JADEPUFFER may be the first agentic ransomware case, exposing how AI agents can turn old credential failures into database destruction. JADEPUFFER is a warning about exposed AI ...

Researchers at Sysdig say they have observed, for the first time, a ransomware attack carried out almost entirely by an AI agent. According to the ...

AI Now’s Friendly Fire PoC shows Claude Code and Codex running README-planted payloads on hosts when autonomous command ...

They're not bad; they're just prompted that way. Sysdig threat hunters documented what they say is the first-ever documented ...

Cybersecurity researchers have discovered a set of malicious npm packages that are designed to deliver a Windows-based remote access trojan (RAT). The list of identified packages, is below - ...

The Total Economic Impact Of Atlassian Cloud Enterprise Learn why Forrester estimates a 230% ROI of Atlassian Cloud Enterprise in The Total Economic Impact study – thanks to improved efficiency, ...

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading ...

Explore the latest news and expert commentary on Application Security, brought to you by the editors of Dark Reading ...

This python file will decrypt the configurationFile used by hikvision cameras vulnerable to CVE-2017-7921. - chrisjd20/hikvision_CVE-2017-7921_auth_bypass_config_decryptor ...

Customer stories Events & webinars Ebooks & reports Business insights GitHub Skills ...