Gong and other scholars have been issuing warnings about the security vulnerabilities of AI agents for a while. They publish ...

Hackers have been exploiting a remote code execution vulnerability in the Everest Forms Pro plugin to take over WordPress ...

Clicking a captcha "I am not a robot" box and identifying images to prove it is second nature for many internet users. Now, cybercriminals are exploiting people's comfort with the routine to scam them ...

The malware, built to look like Minecraft launchers and mods, gives hackers access to your screen, files, webcam, accounts, ...

Now sites have a new way to spy on their visitors: measuring subtle interactions with their solid-state drives. The technique, named FROST (fingerprinting remotely using OPFS-based SSD timing), allows ...

A large-scale campaign impersonates open-source and freeware project portals to redirect users through a gated TDS and ...

Chrome's WebMCP guidance warns that AI agents can be manipulated through the tools they are built to trust.

A China-backed persistent threat actor known as Webworm is targeting governmental organizations across Europe, and it's using unusual command-and-control mechanisms to do so. Security vendor ESET this ...

Customer data from more than 350 hotels around the world may have been accessed as part of realistic reservation-hijacking scams.

That amounted to 29 total scholarships, the organization reports.