An AI-led cyberattack breached limited Hugging Face datasets and service credentials, while public models, Spaces and published packages showed no signs of tampering.

Enterprises are handing AI agents real access to customer records, financial systems, internal documents, and the tools that…

Noma Labs details GitLost, a prompt injection flaw that made GitHub's AI agent expose private repo data through a crafted public issue and guardrail failures.

A new Sysdig report traces how an LLM agent abused a Langflow flaw, stole credentials, reached production MySQL, and destroyed Nacos config data in minutes flat.

AI agent security starts with a simple fact: the more authority an agent has, the tighter its access…

AI agents are reshaping cybersecurity. Learn why verification, trusted identity standards, and runtime controls are now essential.

Microsoft Entra Agent ID flaw allowed privilege escalation and tenant takeover via Service Principal abuse, now fully patched by Microsoft.