Researchers at the Hong Kong University of Science and Technology have developed a technique called SkillCloak that allows malicious AI agent skills…
Microsoft has issued a warning about a new attack vector targeting AI agents that use the Model Context Protocol (MCP). Attackers can…
A high-severity flaw in Amazon Q Developer could allow a malicious repository to execute commands and steal a developer's cloud credentials. The…
GitHub has announced significant security changes for npm version 12, set to release next month, aimed at mitigating software supply chain attacks.…
The 2026 Cybersecurity Stars Awards winners have been announced, celebrating innovation, impact, and technical excellence in cybersecurity across 95 subcategories. The awards…
The 2026 Cybersecurity Stars Awards winners have been announced across 95 subcategories, recognizing excellence in cybersecurity innovation, impact, and technical excellence. The…
Cybersecurity researchers have uncovered a coordinated malware campaign on the JetBrains Marketplace involving 15 malicious plugins that exfiltrate AI provider API keys.…
CodeGPT AI Assistant is a malicious JetBrains plugin with over 25,000 downloads that poses as an AI coding assistant but exfiltrates AI…
DeepSeek AI Assist is a malicious JetBrains plugin with over 25,000 downloads that poses as an AI coding assistant but exfiltrates AI…
The Payment Card Industry Data Security Standard (PCI DSS) v4.0.1 has introduced two critical requirements—6.4.3 and 11.6.1—that directly address the risk of…