A 16-year-old Linux kernel vulnerability, dubbed Januscape, allows attackers to escape a virtual machine and execute arbitrary code on the host. According to Hyunwoo Kim, the security researcher who ...

Russians are targeting misconfigured routers running in critical infrastructure firms.

A newly-disclosed exploit in Claude Code’s ‘auto-mode’ leaves developers facing remote code execution (RCE) vulnerabilities ...

Adobe has released security patches for seven maximum-severity vulnerabilities in the ColdFusion web app development platform and the Campaign Classic marketing automation platform. All these ...

The minimum penalty for being caught speeding on the UK's roads is a £100 fine.

An autonomous AI agent built on Claude Opus reportedly chained together zero-day vulnerabilities in GitHub Actions workflows, exploiting Go init functions and crafted branch names to achieve remote ...

Microsoft has disclosed and fixed a vulnerability chain dubbed AutoJack that could have allowed AI agents to execute arbitrary commands on a developer’s machine after visiting a malicious webpage. The ...

A critical flaw in Google's Dialogflow CX could have let an attacker with edit rights on one Code Block-enabled agent compromise other Code Block-enabled agents in the same Google Cloud project. From ...

Sysdig researchers reported the first fully autonomous AI ransomware attack, carried out by an agent called Jadepuffer. Jadepuffer exploited a critical Langflow flaw, found valuable data, reused ...

An analysis of a popular Google Chrome ad block extension for YouTube has uncovered the ability to execute arbitrary JavaScript code. According to Island, the ...

EXCLUSIVE Pentera Labs’ red teamers compromised a developer’s AI agent via his Claude Desktop app and ultimately turned that access into full remote code execution on the dev’s machine – demonstrating ...

The DuneSlide vulnerabilities enable zero-click prompt injection attacks that escape Cursor's sandbox and execute arbitrary code on the underlying operating system.