❌

Visualização normal

Ontem — 7 de Novembro de 2026Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News

Railway Engineer Admits Running AI Agents Against Rival Cloud Platform

A Railway engineer admitted testing AI agents on Primcloud, whose founder says they sought customer secrets and scanned…
Antes de ontemHackread – Latest Cybersecurity, Tech, Crypto & Hacking News

Cursor Distributed Claude Code Extensions With SSH Backdoor Code

Malicious Claude Code extensions targeted Windows and macOS developers through Cursor collecting device details and planting files for persistent remote access.

EMBRACE Flaws in 5 AI Coding Tools Enable Code Execution and File Theft

EMBRACE affects AI coding tools Cursor, GitHub Copilot, Codex, VS Code and Claude Desktop, enabling code execution, file theft and browser address-bar spoofing.

ADEX: AI Involved in 52% of Detected Ad Fraud Schemes – Shopping Agents Could be Next

New ADEX research shows how AI is making familiar scams cheaper and harder to detect, while fraudsters prepare to target AI shopping assistants.

From Rules to AI and Back 

Fraud prevention combines rules, AI and behavioral analytics to stop scams, reduce false declines and keep automated decisions explainable through human review.

Scanner Poses as 32 AI Bots to Find Credentials and Private Keys

A scanner impersonates 32 AI bots, including OpenAI and Claude crawlers, to search websites for exposed credentials, private keys and cloud configuration files.

Fake AI Attacks Target US Firms as Researchers Warn of Corporate Credential Theft

ANY.RUN analyzed 1,258 sandbox submissions showing how fake ChatGPT and Claude downloads and setup guides steal corporate credentials and browser session data.

Security Teams and AI Tools: Why Executives Won’t Adopt What They Can’t Control

Executives need visibility into workplace AI, clear data controls and limits on agent access before approving wider adoption. Here’s what businesses need in place.

FLock.io Unveils Edge Decision Model, Built on Qwen, for Enhanced Data Privacy

Built on Qwen3.5-2B, the System One model executes sub-31ms local inference, allowing enterprises to run automated classifications quickly, at low cost and completely offline without transmitting sensitive data to third-party cloud servers.

Check Point Reports LiteLLM Flaws Enabling Admin Takeover and API Key Theft

Check Point Research found two LiteLLM vulnerabilities that could let low-privilege users execute code, access sensitive files, hijack admin accounts, and steal AI provider API keys.

SerpApi Expands Beyond Search Results with New Extract API

New API enables developers to extract structured content, discover website pages, and perform bounded crawling, all within the SerpApi workflow

Powering Proactive Defense: How MSSPs Can Strengthen Threat Hunting Against Ransomware

Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings.

Karina Portugal Makes the Case for Know Your Agent

Karina Portugal has spent more than ten years working in digital identity, fraud prevention, anti-money laundering and Know…

Authenticated Doesn’t Mean Safe: Why AI Agents Need Action-Level Security

AI agents can misuse legitimate access. Learn why action-level security, trusted policy enforcement and verified approvals are critical to stop data leaks
❌
❌