Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...

Millions of AI agents and tools around the world have been imperiled by a critical vulnerability that can allow hackers to breach the servers running them and make off with sensitive data and ...

A researcher has published a working exploit for a remote code execution (RCE) flaw impacting ReportLab Toolkit, a popular Python library used by numerous projects to generate PDF files from HTML ...

Google’s Threat Intelligence Group (GTIG) reported the first confirmed instance of a zero-day exploit created with AI, targeting a two-factor authentication bypass in a widely used open-source system ...

A newly discovered 732-byte Python exploit poses severe risks to Linux systems globally. Affecting distributions like Ubuntu and Red Hat, this flaw has gone unnoticed since 2017. AI researchers found ...

Security tooling is not written in a single language. Python powers most automation. C sits at the exploit layer. PowerShell ...

The 2FA bypass exploit stemmed from a faulty trust assumption, providing evidence of AI reasoning that can discover high-level logic flaws. The Google Threat Intelligence Group (GTIG) today released ...