Securonix uncovers the Veil#Drop malware framework, which abuses compromised websites and Google Blogspot to deploy the PureLog information stealer.

Sysdig's JadePuffer case is billed as the first ransomware attack planned and executed end to end by an AI agent, with no human directing it.

An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt ...

Managed Authorisation extension to stable status, adding a centralised way for organisations to control access to MCP servers ...

JadePuffer exploited a vulnerable Langflow server, harvested credentials, moved laterally, and encrypted more than 1,300 ...

With Claude's Fable 5 model back in Claude Code as of July 1 after an 18-day export-control shutdown, developers are resuming the long-horizon autonomous sessions the tool was designed for — and ...

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted ...

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

For global businesses focused on organic growth, choosing between an in-house SEO team and an SEO agency in India is an important strategic decision ...

Claude Code dynamic workflows are now generally available on all paid plans, including Pro for the first time. The feature writes its own orchestration scripts and coordinates up to 1,000 parallel ...

Securonix says PureLogs infection starts with a fake PDF JavaScript file and uses PowerShell, fileless .NET loading, and LOLBins.