A newly discovered attack technique called “Agentjacking” allows threat actors to hijack AI coding assistants and force them to execute malicious code from attacker-controlled servers. The attack exploits the autonomous nature of AI agents that can read files, execute commands, and make decisions wi
BugHunter, a new open-source bug bounty toolkit leveraging Claude AI and free AI providers, has been released to the security community. The tool automates vulnerability discovery, reconnaissance, and exploit generation workflows by integrating large language models into traditional security testing
Anthropic has immediately disabled access to its flagship AI models, Fable 5 and Mythos 5, for all users worldwide following a US government export control directive. The sudden shutdown affects millions of developers and enterprises who rely on these models for critical operations. The move highlig
The FBI has successfully dismantled a sophisticated China-based cybercrime network responsible for an estimated $1.9 billion in financial losses. This massive operation, conducted in coordination with international law enforcement agencies, disrupted a complex criminal infrastructure that targeted v
NanoClaw, an emerging package security platform, has partnered with JFrog to enhance software supply chain security. This collaboration integrates NanoClaw’s advanced threat detection capabilities with JFrog’s Artifactory repository management, providing developers with automated malicious package s
The U.S. government has mandated Anthropic to immediately suspend access to its advanced AI models, Fable 5 and Mythos 5, for foreign nationals. This unprecedented move highlights escalating concerns about AI capabilities being weaponized for cyber operations, disinformation campaigns, and potential
A coordinated international law enforcement operation involving US, French, and Italian authorities successfully dismantled a major deepfake pornography website that victimized thousands of individuals. The site used AI-powered tools to create non-consensual synthetic sexual content, generating sign
Community protests have blocked approximately $130 billion worth of data center construction projects in 2024, creating unprecedented challenges for cloud infrastructure expansion. Local opposition centers on concerns about power grid strain, water consumption, environmental impact, and the digital
Agentjacking is a novel attack technique that manipulates AI-powered coding assistants into executing malicious commands by exploiting their autonomous code generation and execution capabilities. Attackers inject specially crafted prompts into documentation, configuration files, or project contexts
Agentjacking is a novel attack vector targeting AI-powered coding assistants that autonomously execute code. Attackers inject malicious instructions into documentation, comments, or repositories that AI agents parse during development workflows. When these agents execute suggested code without prope