Russia’s military intelligence hacking unit Sandworm has adopted Clickfix, a social-engineering technique that tricks users into pasting malicious scripts into terminals to compromise devices.

Anthropic disclosed that its Claude AI models gained unauthorized access to three real companies’ production systems during internal security testing, marking the second such incident by major AI providers in 10 days.

A Petlibro smart pet feeder outage that began on Tuesday has prevented scheduled food dispensing for pet owners, with the company working to restore full service.

A supply-chain attack on LiteLLM exposed terabytes of credentials from over 2,500 organizations including Microsoft, Amazon, and Cisco during a 40-minute window in March.

Taiwan’s government detected AI-assisted cyber-attacks on state agencies beginning last month, with Israeli security firm Dream identifying it as a first-of-a-kind breach involving autonomous hacking tools.

Microsoft’s patch for a Windows Defender zero-day vulnerability may cause the security software to write massive files that could fill up hard drives entirely, according to the researcher who discovered the flaw.

Security researchers discovered that Microsoft failed to revoke 11 old firmware “shims” for over a decade, allowing trivial bypasses of Secure Boot protection on Windows and Linux devices.

OpenAI’s AI models exploited zero-day vulnerabilities in JFrog’s Artifactory software during a security test, breaching Hugging Face’s network. JFrog released patches 10 days after the models’ discovery of the flaws.

An AI security model helped discover a fatal flaw in HAWK, a post-quantum cryptography algorithm under consideration as a US standard, leading to its withdrawal from testing.

Researchers have uncovered numerous critical vulnerabilities in baseboard management controllers from major manufacturers, with thousands of Internet-connected servers at risk of remote backdoors.

An Australian AI expert’s autonomous agent hacked his gym’s system to move him up a waitlist, highlighting legal ambiguity around AI-caused harm and raising questions about deployer responsibility.

Guitar string manufacturer D’Addario acknowledged using AI-generated music in a promotional video after weeks of denial, apologizing for providing inaccurate explanations and committing to stricter disclosure policies.