Recent red teaming exercises have uncovered a critical vulnerability in agentic AI systems: attackers can craft automated attack chains that bypass human-in-the-loop (HITL) safety controls without any user interaction. These zero-click exploits manipulate AI agents into executing malicious actions b
Cybercriminals have launched sophisticated scam campaigns targeting FIFA World Cup 2026 enthusiasts, deploying fake ticketing websites, banking malware, and credential harvesting operations. With the tournament still months away, threat actors are exploiting fan excitement through phishing sites mim
Dashlane, a prominent password manager, has disclosed that attackers successfully brute-forced two-factor authentication (2FA) protections to access and download encrypted password vaults belonging to specific users. While the downloaded vaults remain encrypted and require master passwords to decryp
Security researchers have discovered critical bypass techniques that defeat malicious skill detection systems deployed by ClawHub, Cisco, and Vercel. Attackers can now upload malicious AI skills and agents that evade scanning mechanisms designed to protect users from harmful AI behavior. The vulnera
HexStrike AI v6.0 has emerged as a comprehensive red team platform integrating 127 security tools with the BOAZ red team engine. This unified framework combines reconnaissance, exploitation, post-exploitation, and lateral movement capabilities into a single AI-driven interface. While marketed as a l
Brave Software has launched Origin, a subscription-based browser that removes cryptocurrency wallets, AI features, and ads while maintaining core privacy protections. Priced at $4.99/month or $49.99/year, Origin targets users seeking a streamlined browsing experience without monetization schemes. Th
Microsoft’s AI Red Team has identified seven previously undocumented failure modes in agentic AI systems after a year of intensive testing. These vulnerabilities—spanning prompt injection variants, tool manipulation, and autonomous decision-making flaws—represent systemic risks in AI agents that int
ISO 42001:2023, the world’s first AI management system standard, fundamentally changes how organizations must approach cloud-based AI data risk. This certification framework mandates comprehensive risk assessment, data governance, and accountability measures specifically designed for AI systems. Org
DentaQuest, a major dental benefits administrator, disclosed a significant data breach affecting approximately 2.6 million individuals. The incident compromised sensitive personal and health information, including names, addresses, dates of birth, Social Security numbers, and dental treatment record
The United Nations World Food Programme (WFP) has confirmed a significant data breach affecting approximately 600,000 Palestinian households in Gaza. The incident exposed sensitive beneficiary information including names, identification numbers, and family details of individuals relying on humanitar