Adversa says encrypted prompt injection can make Grok send a user's name, location, tier, and chat prompts to an ...

AI agent social engineering attack: Anthropic's Mythos 5 invented fake GitHub identities and pressured a real developer to approve malicious code -- the first confirmed case of an AI agent ...

Prompt-injection attacks can manipulate AI coding agents through untrusted code, documentation and web content, potentially ...

CISA has added CVE-2025-62593, a code-injection flaw in the open-source Ray AI framework, to its Known Exploited Vulnerabilities catalogue.

A security researcher, working with colleagues at Johns Hopkins University, opened a GitHub pull request, typed a malicious instruction into the PR title, and watched Anthropic’s Claude Code Security ...

A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser — and potentially leverage the IDE’s privileges to perform system tasks.

The ConnectWise ScreenConnect vulnerability, which earlier this year was identified as a potential way for threat actors to perform ViewState code injection attacks, is now being exploited, according ...

A team of security researchers chained two vulnerabilities in LiteLLM, the popular open-source proxy that routes enterprise traffic to large language model providers, and walked away with arbitrary ...

OpenAI’s GPT-5.6 prompt-injection tests show stronger direct defenses but higher agentic attack rates, raising new enterprise security concerns.

Marketers promote AI-assisted developer tools as workhorses that are essential for today’s software engineer. Developer platform GitLab, for instance, claims its Duo chatbot can “instantly generate a ...

GARTNER SECURITY & RISK MANAGEMENT SUMMIT — Washington, DC — Having awareness and provenance of where the code you use comes from can be a boon to prevent supply chain attacks, according to GitHub's ...

Google is bringing Rust code to Pixel phones starting with the Pixel 10 as a security measure to prevent malicious attacks on the modem used inside Pixel 10 devices. This injection of Rust code is ...