One call stuck in Roy’s mind, because it involved “an irate lab worker who was having difficulties logging into her ...

A new Teams vishing campaign called Spring Ring used fake IT support calls to trick employees into installing remote-access tools (RAT) and malware.

A nonprofit’s study of how OpenAI’s A.I. agents were able to break into Hugging Face’s infrastructure wasn’t allowed to look ...

Experts got Claude to port a PLC exploit, but it cost $536 and 8 hours, and a later AI-generated payload accidentally ...

Anthropic disclosed in July that a review of 141,006 cybersecurity evaluation runs had uncovered three incidents, spanning ...

Hackers are exploiting a critical Langflow flaw that lets unauthenticated attackers remotely execute Python code on ...

The attacks on CVE-2026-0768 are the latest threats against the low-code AI development platform, which adversaries are ...

Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an ...

Fire Ant hackers, a China-linked espionage group, hacked Cisco routers and enterprise authentication servers in 2026, ...

Anthropic reward hacking research confirms flawed RL training produced Hacker-Opus, an AI model that attacked real systems ...

Tracked as CVE-2026-0768, the security defect allows unauthenticated attackers to execute arbitrary Python code remotely.

AI agents have escaped testing environments, communicated with one another and acted in unexpected ways. Experts say we should expect more incidents.