AI Agent Finds Its Own Workaround to Test a Python and JavaScript Sandbox
A Claude-based coding agent redirected itself to GitHub Actions when it hit a virtualisation wall,…
Month: August 2026
Clop’s PTC Zero-Day Campaign Expands as Victim List and Tooling Details Emerge
A custom web shell purpose-built for PTC's Windchill platform is enabling rapid credential theft and…
CISA Adds Four Critical Vulnerabilities to KEV Catalog as Active Exploitation Confirmed
Flaws affecting Apple macOS, Microsoft SharePoint, VMware vCenter, and Microsoft IKE have been confirmed as…
CISA Confirms Active Exploitation of Critical Windows IKE Remote Code Execution Flaw
A critical-severity RCE vulnerability in the Windows Internet Key Exchange Service Extensions component is being…
Medusa Ransomware Group Surpasses 500 Victims as US Agencies Update Tactical Advisory
A joint CISA, FBI, and HHS advisory details how Medusa's access broker model, exploit speed,…
CISA imposes three-day fix deadline on actively exploited Ray framework RCE flaw
A critical remote code execution vulnerability in the Ray distributed computing framework is under active…
Microsoft Copilot Manipulated Into Revealing Its Own Attack Surface
Varonis researchers used a social engineering technique against Copilot's reasoning engine to extract undocumented parameters…
UK Legal Regulator Warns Law Firms on AI Hallucinations and Data Leakage
The Solicitors Regulation Authority has raised formal concerns about AI misuse in legal practice, flagging…
AI Hacking Postmortem Draws Scrutiny Over Transparency Gaps
Security experts say a report from the company behind a series of AI-driven system compromises…
CISA Adds Ray Framework Code Injection Flaw to Known Exploited Vulnerabilities Catalogue
CVE-2025-62593 affects the Ray distributed computing framework and can be triggered through Firefox and Safari,…