Attackers exploited Langflow vulnerability CVE-2025-3248 to conduct an agentic AI-powered ransomware attack involving reconnaissance, credential theft, and lateral movement.

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

GitHub moved the AI coding landscape on Wednesday when it made Kimi K2.7 Code — a Beijing-built, open-weight model from Moonshot AI — generally available in the GitHub Copilot model picker, marking ...

Sysdig threat hunters documented what they say is the first-ever documented agentic ransomware infection with an LLM - not a ...

Ben Guez has "a bunch of potential international wives in DMs," thanks to an automated script he set up using OpenClaw, ...

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...

Eighteen new GNU releases in the last month (as of June 30, 2026): apl-2.0: GNU APL is a free interpreter for the programming language APL. It is an implementation of the ISO stan ...

A researcher found that using Anthropic’s Claude Opus 4.7, he could break into the website of Front Gate—used by every ...

A SimpleHelp authentication flaw is being exploited to deploy Djinn Stealer, a cross-platform malware targeting cloud, ...

Percona, a provider of open source database software and services, today announced a partnership with HexaCluster, a PostgreSQL migration and services specialist, to help organizations move off ...

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Oracle was previously slated over how it handled MySQL – the company now has a new plan to involve the community.