A newly-disclosed exploit in Claude Code’s ‘auto-mode’ leaves developers facing remote code execution (RCE) vulnerabilities ...

The inaugural STAR Labs report ran real exploits on AI agents and found that 91% of successful attacks on productivity agents left no trace. MOUNTAIN VIEW, Calif., July 14, 2026 / ...

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

A 16-year-old Linux kernel vulnerability, dubbed Januscape, allows attackers to escape a virtual machine and execute ...

Windows Defender zero-day CVE-2026-50656 — known as RoguePlanet — has been patched by Microsoft 29 days after researcher ...

A Linux vulnerability that allows untrusted virtual machines to gain root access to host machines is one of two high-severity ...

Humanity Protocol will refocus its cybersecurity efforts on operational security, as more hackers are switching from smart ...

Attackers can exploit how AI bots hallucinate software URLs to create massive botnets. The vulnerability is endemic to every ...

Straiker's inaugural STAR Labs threat report found more than 1,700 successful exploits across enterprise AI agents, ...

Researchers reported the flaw to Cursor in December, but it still remains in the popular AI coding platform and can be used ...

GodDamn ransomware uses remote desktop application to secretly move around networks and drop the malicious PoisonX kernel ...