Researchers found an indirect prompt injection flaw in Google Gemini that bypassed Calendar privacy controls and exposed ...

Varonis found a “Reprompt” attack that let a single link hijack Microsoft Copilot Personal sessions and exfiltrate data; Microsoft patched it in January 2026.

Miggo’s researchers describe the methodology as a form of indirect prompt injection leading to an authorization bypass. The ...

PromptArmor, a security firm specializing in the discovery of AI vulnerabilities, reported on Wednesday that Cowork can be ...

AI agents are rapidly moving from experimental tools to trusted decision-makers inside the enterprise—but security has not ...

The first round of SAP patches for 2026 resolves 19 vulnerabilities, including critical SQL injection, RCE, and code ...

Radware’s ZombieAgent technique shows how prompt injection in ChatGPT apps and Memory could enable stealthy data theft ...

CrowdStrike's 2025 data shows attackers breach AI systems in 51 seconds. Field CISOs reveal how inference security platforms ...

There’s a well-worn pattern in the development of AI chatbots. Researchers discover a vulnerability and exploit it to do ...

Cybercriminals don't always need malware or exploits to break into systems anymore. Sometimes, they just need the right words in the right place. OpenAI is now openly acknowledging that reality. The ...

"The subject was directly inspired to act by ISIS," the FBI said. The FBI said it "thwarted a potential" New Year's Eve terror attack in North Carolina. The Justice ...