MCP tool poisoning turns trusted AI agents into a control plane for data loss. Learn how threat actors manipulate tool ...

Decades-old Bash shell tricks can bypass safeguards in most open source AI coding agents, creating a new software supply ...

The Transportation Security Administration (TSA) will sunset the Known Crew Member (KCM) screening program for aircrew in the ...

In 2025 and 2026, several independent sources have highlighted the same trend: Prompt injection remains one of the most ...

Oracle expands its AI database security strategy with new data protection, patching, and cyber resilience tools to help ...

For years, enterprises have observed familiar patterns in insider threats: cyber hygiene wasn’t followed. A disgruntled ...

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your ...

Administrators of the Drupal open source content management platform are rushing to install an emergency patch issued today to fix a “highly critical” SQL injection vulnerability in the application’s ...

The structured query language is a powerful tool for connecting to many database systems that store data in tables organized into rows and columns. It's often used on the backend of business websites ...

A security flaw in the Ally WordPress plugin used on more than 400,000 sites could allow attackers to extract sensitive data without logging in. A vulnerability in a widely used WordPress ...

There’s a well-worn pattern in the development of AI chatbots. Researchers discover a vulnerability and exploit it to do something bad. The platform introduces a guardrail that stops the attack from ...