New MCP specification kills old risks but opens fresh attack surfaces, Akamai finds

A major overhaul of the Model Context Protocol due next month removes several longstanding protocol-level security risks but ...

How I stopped a massive WordPress spam attack with 4,700 lines of code in two days - thanks to Codex and Claude

How I stopped a massive WordPress spam attack with 4,700 lines of code in two days - thanks to Codex and Claude ...

AI browsers like Perplexity Comet can be tricked into spilling your password through BioShocking exploit

A new exploit called BioShocking convinces AI browsers they're playing a game, then gets them to hand over your private data.
Decrypt

This AI Agent Survived 6,000 Hack Attempts—Here’s How

Developer Fernando Irarrázaval's AI agent experiment drew over 6,000 hack attempts from more than 2,000 attackers. No one ...

Lost access to your crypto wallet? Don’t Google your way out of it

A new scam is targeting cryptocurrency owners by disguising malware as wallet recovery software for forgotten seed phrases. The Latest Tech News, Delivered to Your Inbox ...
Microsoft

Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access

Microsoft Threat Intelligence identified an active multi-stage intrusion campaign targeting hospitality organizations in ...

Scammers are using a fake captcha hack to steal your personal information: 'Verify you're human.' Here's the big red flag to watch for

Hackers are using this insidious scam to get unwitting victims to install malware themselves.
Microsoft

AutoJack: How a single page can RCE the host running your AI agent

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...