Pillar Security discovered an agent-to-agent attack method in Google’s Agent Development Kit for Python that could lead to secret exposure and pull request (PR) poisoning. The google/adk-python repository had two classes of automated AI agents, namely low-privileged ones open to… Read More "Gemini Agent-to-Agent Attack Method Exposed Secrets, Enabled Pull Request Tampering"
A new Russian loader-as-a-service (LaaS) codenamed DOUBLECUP has been using ClickFix lures as a way to stage malware-laced PNG images in victims’ browser cache and ultimately deliver CountLoader and a previously undocumented remote access trojan called DeviceManager. “The first stage… Read More "DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT"
Closing this security gap isn’t just important to mitigate the financial and reputational damage of the worst-case scenario of a data breach. It’s also increasingly important to keep regulators happy. Both NIS2 and DORA, while not AI-focused regulations, certainly make… Read More "Secure AI adoption starts with API best practices"
Has your inbox recently been deluged with unwanted and even outright malicious messages? Here are 10 possible reasons – and how to stem the tide. 27 Jan 2026 • , 5 min. read For all our modern obsession with social… Read More "Drowning in spam or scam emails lately? Here’s why"
AI-driven cybercrime now accounts for 55% of all reported digital crime in Africa, Interpol has warned. The policing group made the claim in a new African Cyberthreat Assessment Report 2026, which draws on data provided by its 36 member countries… Read More "AI Accounts for Over Half of Cybercrime in Africa, Says Interpol"
Madera Community Hospital in California is notifying just over 150,000 individuals that their personal, financial, and medical information was compromised in a data breach. A not-for-profit community healthcare provider serving Madera County and surrounding areas, Madera Community Hospital provides emergency… Read More "150,000 Impacted by Madera Community Hospital Data Breach"
Ravie LakshmananAug 04, 2026Vulnerability / Enterprise Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild.… Read More "CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises"
Moreover, this attack leaves no malicious binary on disk, does not inject code into other processes, and has no classic persistence mechanisms. As a result, it won’t be detected by EDRs or from a workstation monitoring perspective, because it looks… Read More "Attackers are crafting malicious AI instruction files to turn your agentic workflows into quiet criminal helpers"
It’s time to file your tax return. And cybercriminals are lurking to make an already stressful period even more edgy. 10 Feb 2026 • , 5 min. read To misquote Benjamin Franklin, nothing is certain in this world except for… Read More "Taxing times: Top IRS scams to look out for in 2026"
The amount of sensitive enterprise data which employees uploaded to AI and machine learning applications has almost doubled in the last year, putting organizations at increased risk of data breaches and cyber espionage, a new report has warned. Published on… Read More "Sensitive Enterprise Data Uploads to AI Models Double in a Year"
