Agentjacking is a novel attack vector targeting AI-powered coding assistants that autonomously execute code. Attackers inject malicious instructions into documentation, comments, or repositories that AI agents parse during development workflows. When these agents execute suggested code without prope
Microsoft has addressed a significant bug affecting the Windows Update Standalone Installer (WUSA) that prevented users from successfully installing critical security patches and feature updates. The issue, which caused installation failures across multiple Windows versions, has been resolved throug
Senator Bernie Sanders has proposed creating a federally-managed AI Sovereign Wealth Fund that would acquire equity stakes in artificial intelligence companies in exchange for public resource access. The plan aims to distribute AI profits to American citizens while raising significant questions abou
Plymouth City Council has exposed the personal information of hundreds of families after mistakenly sending an email that revealed recipients’ addresses in the “To” field rather than using blind carbon copy (BCC). The incident represents yet another email handling failure affecting a UK local govern
A critical vulnerability chain in LangGraph, a popular framework for building stateful AI agents, enables attackers to achieve remote code execution (RCE) on self-hosted deployments. The flaw combines insecure deserialization with insufficient input validation, allowing malicious actors to inject ar
Federal law enforcement agencies have seized two cryptocurrency mixing services, AudiA6 and Dark2Web, as part of a massive $389 million money laundering investigation. The operation, coordinated across multiple jurisdictions, targeted platforms that facilitated the laundering of illicit proceeds fro
The United Kingdom has established an advisory board to oversee and challenge its developing digital identity infrastructure. This board comprises cybersecurity experts, privacy advocates, and technology leaders tasked with ensuring the digital ID program balances innovation with robust security and
Over 21,000 home security cameras are broadcasting live feeds to the internet without any password protection, exposing private moments from bedrooms, living rooms, and nurseries to anyone who knows where to look. This massive exposure affects multiple camera brands and models, with feeds accessible
Europol coordinated a multinational operation to dismantle AudiA6, a sophisticated cryptocurrency laundering service that facilitated the washing of illicit proceeds for multiple ransomware groups. The takedown involved law enforcement from seven countries, resulting in server seizures, arrests, and
CISA has issued an emergency directive requiring all federal agencies to patch a critical Ivanti Connect Secure vulnerability within 72 hours. The flaw, actively exploited in the wild, allows unauthenticated attackers to achieve remote code execution. This directive applies to civilian federal agenc