Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

Microsoft announced the Azure Functions serverless agents runtime in public preview at Build 2026, turning the event-driven compute service into a platform for building and hosting AI agents. The ...

They're not bad; they're just prompted that way. Sysdig threat hunters documented what they say is the first-ever documented ...

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...

Spring AI enterprise Java is now in production, but agent security is the next crisis: UberConf 2026 opens today in Denver ...

Microsoft is extending Dataverse into coding-agent marketplaces while expanding its MCP tools, certification program and governance controls.

Threat researchers at cloud security firm Sysdig have disclosed what they describe as the first documented ransomware operation carried out end-to-end by an autonomous AI agent, with no human typing ...

Microsoft has officially unveiled Azure Linux 4.0, the latest version of its open-source Linux distribution designed for ...

Cloud security firm Sysdig has documented what it says is the first ransomware attack carried out from initial exploitation through encryption by an autonomous AI agent, without a human directing each ...

a laptop screen with a webpage of the IT Army of Ukraine group of volunteer hackers. The IT Army of Ukraine first set up in the wake of Russia's devastating attack, and has since hugely grown in ...

A new class of CI/CD workflow weakness enables attackers to use malicious pull requests to compromise software supply chains. Elad Meged, founding engineer and security researcher at ...

Industrial AI may be all the rage, but it’s useless-to-dangerous without standardized, relevant data to work from. And yet, ...