According to new research from Blackpoint Cyber's Adversary Pursuit Group (APG), published on July 30, the intrusion hit two ...
The flaws show how agentic workflows can turn trusted repository signals into privilege-escalation paths that conventional ...
Google removed 3 ADK AI workflows after Pillar showed a public GitHub issue could trigger a privileged agent & reach code ...
A low-privilege Google ADK for Python agent could be abused to inject prompts into privileged agents, leading to PR poisoning ...
A researcher demonstrated a proof-of-concept attack chain that provided C2-style influence over ChatGPT's isolated sandbox at Black Hat USA 2026.
AI agent flaws in AWS, Google, and Vercel let forged tool calls reach tools without model authorization, while several paths ...
Autonomous AI cyberattack campaign using DeepSeek and the Hermes Agent framework attacked 460-plus targets after a Chinese ...
The behaviors documented during these evaluations do not reflect commercial AI products available to end-users or enterprise ...
Sam Altman shared an exact prompt he gave ChatGPT, so I used it too. In hours, I had made a website without writing a single ...
At Black Hat USA, Zenity Labs today announced new research detailing an active credential-stealing malicious skills campaign distributed through Vercel's skills.sh. The affected skill family amassed ...
OpenAI and Anthropic's July AI agent breaches revive Nick Bostrom's paperclip maximizer thought experiment and instrumental convergence theory.
The attackers behind the Atomic Arch supply chain campaign have adapted. After Arch Linux developers purged more than 1,900 compromised packages and declared the community repository clean in mid-June ...