Incidents tagged can

Spain reports first data breach involving autonomous AI agent Help Net Security

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server without logging in, Dutch e-commerce security company Sansec said in an advisory published on September 5. Sansec, which discovered the flaw and named it StyleSmuggler, said attacks started on September 4. "Sansec is

Unit 42 details a Chinese speaking threat actor combining autonomous AI scanning across seven vulnerabilities with manual exploitation. Read more. The post Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks appeared first on Unit 42.

Attackers are actively exploiting critical vulnerabilities, including Adobe ColdFusion (CVE-2026-48282) and Langflow (CVE-2026-55255) for credential harvesting. Microsoft released fixes for a Windows Defender local privilege escalation flaw (CVE-2026-50656), and ClamAV patched seven scanner bugs, underscoring ongoing patch management challenges.

TeamPCP orchestrated a sophisticated supply chain attack, compromising the Trivy security scanner's CI/CD pipeline to publish malicious versions of the LiteLLM AI proxy package to PyPI. These trojanized versions deployed a multi-stage payload for credential harvesting, Kubernetes lateral movement, and persistent remote code execution.