Attackers exploited Langflow vulnerability CVE-2025-3248 to conduct an agentic AI-powered ransomware attack involving reconnaissance, credential theft, and lateral movement.

Sysdig threat hunters documented what they say is the first-ever documented agentic ransomware infection with an LLM - not a ...

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...

A SimpleHelp authentication flaw is being exploited to deploy Djinn Stealer, a cross-platform malware targeting cloud, ...

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

The infostealer was delivered via CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp.

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...

Learn how the identities of people, apps, and services are verified before they’re given access to digital systems and resources. Authentication is the process that companies use to confirm that only ...

This week's ThreatsDay Bulletin covers curl flaws, a critical Hoppscotch bug, smart TV proxyware, macOS ClickFix attacks, ...

For developers, Fable 5 is available through the Claude API as claude-fable-5. Anthropic says Fable 5 is fully available today on the Claude API and on consumption-based Enterprise plans. For ...

WASHINGTON — Diplomats will sign at least one memorandum of understanding this week. Secretary of State Marco Rubio and UFC CEO Dana White have reached an agreement to use cage fights for diplomacy, ...