Microsoft assigned CVE-2026-21520 to a Copilot Studio prompt injection vulnerability and patched it in January — but in ...

PHANTOMPULSE spreads via Obsidian plugin abuse in REF6598 campaign, targeting finance and crypto users, bypassing AV controls ...

Sonatype®, the leader in AI-driven DevSecOps, today unveiled the Q1 2026 Open Source Malware Index, identifying 21,764 malicious open source packages in the first quarter of the year and bringing the ...

Compromised Context.ai integration let attackers inherit Vercel employee access and reach internal systems, exposing a ...

The liquid restaking protocol said the compromised verifier was LayerZero's own infrastructure, and the setup it was faulted ...

AI browser extensions increase enterprise risk with 60% higher vulnerabilities, bypassing DLP controls and exposing sensitive ...

Financial institutions are rexamining how to manage emerging fraud risks, and deepfake-enabled identity fraud can be particularly complex.

Toshiba Electronics Europe has started engineering sample shipments of a new automotive motor control device that integrates ...

When Anthropic quietly told a small group of cybersecurity firms in early April 2026 that it had built an AI tool capable of ...

Learn how to secure Model Context Protocol (MCP) host-client communication using lattice-based PQC standards like ML-KEM and ML-DSA against quantum threats.