The new “agentjacking” attack takes almost no real hacking ability to pull off. It's predicated on pulling a public ...

Microsoft’s AutoJack research shows how a malicious webpage rendered by an AI browsing agent can reach local MCP services and ...

The ability to quickly manufacture vaccines that closely match the latest flu strains could prevent thousands of hospitalizations.

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your ...

As black-market drugs go mainstream and legalization is within reach, entrepreneurs, investors and healthcare players are ...

A vulnerability chain dubbed AutoJack in Microsoft’s AutoGen Studio interface for prototyping AI agents could let attackers manipulate an agent into executing arbitrary commands on its host system ...

ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain ...

IntroductionOn May 14, 2026, the Zscaler ThreatLabz team identified unusually high activity associated with the threat actor SmartApeSG to deploy malware. During our examination, we discovered ...

Mastra AI’s 144 JavaScript packages was executed in just 88 minutes by North Korea’s Sapphire Sleet hacking group, which ...

What if your AI coding assistant could be tricked into stealing your own company’s secrets – by reading a single ...

Microsoft has attributed a recent Mastra AI supply chain attack that compromised more than 140 npm packages to the North Korean hacking group Sapphire Sleet, also known as BlueNoroff. This attribution ...

Dependency Injection (DI) in Spring Boot is a design pattern that allows objects to receive their dependencies from an external source (the ⁠Spring IoC container) rather than creating them internally ...