Blackpoint uncovers ChainScript, a Node.js RAT that queries a Polygon smart contract to find and rotate its command server.

LittleHorse adds agent controls and free serverless trial to its 'Business-as-Code' orchestration platform - SiliconANGLE ...

A malware campaign using the EtherHiding technique has exploited the Polygon blockchain to conceal and dynamically rotate command-and-control infrastructure while stealing banking and cryptocurrency ...

Two OpenAI Codex sandbox flaws, Overpatch and Heapjack, could let malicious repositories execute commands on developer systems.

New capabilities in Saddle Command Center 1.3 include easy AI agent creation, pre-built task workers and agent skills, a Javascript SDK for developers, and a new free serverless offering for easy ...

Claude Code has stopped billing part of its own safety machinery, but only for some accounts. Version 2.1.278, released on September 19, changes auto mode ...

Browser AI agent security research: security researcher Gal Weizman of Forever Security demonstrated that one ordinary browser extension can hijack AI agents in Chrome, Edge, Perplexity Comet, Opera ...

Brevo supply chain breach spreads WordPress backdoors and ClickFix malware to over 100,000 websites. Discover how to protect ...

Researchers escaped OpenAI's Codex sandbox two ways, one running commands on a developer's machine from its most locked-down mode. OpenAI has patched both.

Orkes Conductor CVE-2026-58138 is under active attack. Patch to 3.30.2 or later, isolate workflow APIs, hunt command ...

A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The ...