Attackers have begun embedding hidden instructions in websites to target AI agents, according to new research. Zscaler's ...

Opera GX patched a flaw that let malicious sites silently install GX Mods and leak a signed-in user’s Gmail address with CSS.

VS Code 1.127 enhances agent session management, introduces per-site browser permissions, and makes browser tools for agents ...

Two critical Cursor IDE vulnerabilities, dubbed DuneSlide, let prompt injection break the editor's command sandbox with no ...

A practitioner's breakdown of the CSRF attack: how the forged request works, two documented exploits, a manual test, and the ...

TL;DR Why EN 303 645 matters ETSI EN 303 645 has given consumer IoT security a much-needed baseline. It gives manufacturers, assessors, and product teams a shared view of reasonable IoT security and ...

The new PamStealer Mac malware appears to be surprisingly clever while it harvests data and login credentials in the ...

Discover the AI Agent Safety Directory that evaluates AI agents before deployment with trusted safety ratings, risk insights, and performance benchmarks.

Zscaler found attackers using SEO poisoning and hidden prompts in malicious websites to manipulate AI agents into making cryptocurrency payments.

A critical prompt injection vulnerability in GitHub Agentic Workflows could allow unauthenticated attackers to leak private repository data, ...

Named after BioShock's 'Would you kindly' mechanic, the attack trains AI agents to accept false information before stealing ...

In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are ...