AI agent identity verification fails at both ends. DataDome tested 698,000 sites—80% couldn't detect spoofed ChatGPT traffic. Here's why.

Google has disclosed that its Gemini artificial intelligence models are being increasingly exploited by state-sponsored hacking groups, signaling a major shift in how cyberattacks are planned and ...

More than 25 million individuals are now tied to the Conduent Business Services breach as investigations continue to expand its scope. In Canada, approximately 750,000 investors were affected in the ...

Over 900 FreePBX systems remain infected after CVE-2025-64328 exploitation, now listed in CISA KEV amid active attacks.

Hackers exploited CVE-2025-64328, a FreePBX command injection vulnerability, to infect hundreds of instances with web shells.

CISA ordered federal agencies on Thursday to secure their systems against a critical Microsoft Configuration Manager ...

Google Threat Intelligence Group (GTIG) has published a new report warning about AI model extraction/distillation attacks, in ...

More than 40,000 WordPress sites using the Quiz and Survey Master plugin have been affected by a SQL injection vulnerability that allowed authenticated users to interfere with database queries. The ...

The malicious version of Cline's npm package — 2.3.0 — was downloaded more than 4,000 times before it was removed.

Cline CLI 2.3.0 was published with a stolen npm token, installing OpenClaw in an 8-hour attack affecting ~4,000 downloads.

Fake CAPTCHA attacks exploded by 563% last year: How to spot them and stay safe online ...