Securing MCP servers before the AI rollout outpaces security
Your company’s CTO has a plan to implement your company’s first LLM-based application. The board approved […]
PHP2Shell will persist in enterprise environments for years
Two critical vulnerabilities were announced last week in PHP, the internet’s most widely used web application […]
Fake ChatGPT, Claude apps spread malware via signed AI binaries
Attackers are distributing malware through fake ChatGPT and Claude desktop applications, using legitimate, digitally signed executables […]
Gheist turns GitHub Actions into a secret extraction service
A threat actor dubbed Gheist is turning compromised GitHub accounts into credential-harvesting platforms. By planting malicious […]
Trusting Unsloth’s trust setting could mean executing malicious code
AI developers may have a security setting enabled and still end up running attacker-controlled code. Pillar […]
When prevention fails: Why cyber resilience is the next big test of trust
Imagine arriving at work on a Monday morning to find employees cannot log in, customer service […]
10 ways attackers abuse AI services to hack your business
Attackers are starting to exploit AI systems to mount attacks in the same way they once […]
Attackers compromised 42 GitHub repositories by using files too large to be searched
A security research firm reported Monday that it had identified breaches of 42 third-party GitHub repositories […]
Attackers built a ‘Skynet’ AI agent that hijacks exposed models to run cyberattacks
Skynet is no longer a fictional adversary. Attackers have built an offensive agent that exploits unprotected […]
Zero Trust for Federal Agencies: Securing Mission-Critical Systems
Key Takeaways Federal Zero Trust programs must align with applicable OMB requirements, CISA guidance, and agency-specific […]