Palo Alto Networks has shared details about how its researchers weaponized AI agents built on Google Cloud’s Vertex AI development platform. The research focused on the Vertex Agent Engine and the Agent Development Kit (ADK), which enable developers to create,… Read More "Google Addresses Vertex Security Issues After Researchers Weaponize AI Agents"
Ravie LakshmananApr 01, 2026Data Breach / Artificial Intelligence Anthropic on Tuesday confirmed that internal code for its popular artificial intelligence (AI) coding assistant, Claude Code, had been inadvertently released due to a human error. “No sensitive customer data or credentials… Read More "Claude Code Source Leaked via npm Packaging Error, Anthropic Confirms"
The war in Iran was less than 24 hours old when it produced a historic first: the deliberate targeting of commercial data centers. On March 1st, Iranian drones hit three Amazon Web Services (AWS) facilities in the United Arab Emirates… Read More "What to have on your radar"
Fake shipment tracking scams are rapidly scaling across the world, exploiting the 161 billion annual parcel volume that fuels global e-commerce, according to threat intelligence provider Group-IB. The firm’s Threat Intelligence research team detected a spike in this type of… Read More "Researchers Warn of Global Surge in Fake Shipment Tracking Scams"
Die Ergebnisse werden mit bekannten Angriffsmethoden korreliert, um den Entscheidungsfindungs- und Triageprozess zu unterstützen. Dabei überwacht AttackMapper nicht nur Endpunkte und Software Vulnerabilities, sondern auch SSL-Schwachstellen, abgelaufene Zertifikate, DNS-Einträge und Konfigurationen. Das Tool erkennt selbst Website-Defacement-Angriffe, was entscheidend sein kann,… Read More "Attack Surface Management – ein Kaufratgeber"
ESET’s Jake Moore used smart glasses, deepfakes and face swaps to ‘hack’ widely-used facial recognition systems – and he’ll demo it all at RSAC 2026 13 Mar 2026 • , 2 min. read Facial recognition is increasingly embedded in everything… Read More "What it takes to fool facial recognition"
A .NET-based infostealer sold as part of a commercial cybercrime toolkit that bundles a stealer, crypter and remote access tool (RAT) under subscription tiers has been detailed further by cybersecurity researchers. The malware, known as Phantom Stealer, collects browser credentials,… Read More "Phantom Project Bundles Infostealer, Crypter and RAT For Sale"
Ideally, Janca said, developers should harden their build environment, so they don’t ship debug information/features with production. She offered these tips to developers: disable source maps in the build/bundler tool; add the .maps file to the .npmignore / package.json files… Read More "Anthropic employee error exposes Claude Code source"
The past four weeks have seen a slew of new cybersecurity wake-up calls that showed why every organization needs a well-thought-out cyber-resilience plan 31 Mar 2026 As March 2026 draws to a close, ESET Chief Security Evangelist Tony Anscombe looks… Read More "This month in security with Tony Anscombe – March 2026 edition"
