Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...

Stealthy Mistic backdoor linked to ransomware access broker KongTuke

A new backdoor dubbed Mistic has been observed in financially motivated attacks targeting organizations in the insurance, ...
SecurityWeek

Russian APT Deploys ‘StockStay’ Backdoor Against Ukrainian Targets

Russia-linked APT Turla has been using the StockStay backdoor against government and military organizations in Ukraine.
Microsoft

AutoJack: How a single page can RCE the host running your AI agent

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...
PC Magazine

Google's Gemini AI Can Do a Lot, But Here Are 15 Features You'll Actually Use

If you want to ask Gemini questions about your own personal files, emails, appointments, and other content, you can do that through a connected app. Here, you’re able to connect Gmail, Google Drive, ...