AI

OpenClaw Vulnerability Allowed Websites to Hijack AI Agents

OpenClaw Vulnerability Allowed Websites to Hijack AI Agents 2026-03-02 at 16:57 By Ionut Arghire Malicious websites could open a WebSocket connection to localhost on the OpenClaw gateway port, brute force passwords, and take control of the agent. The post OpenClaw Vulnerability Allowed Websites to Hijack AI Agents appeared first on SecurityWeek. This article is an […]

OpenClaw Vulnerability Allowed Websites to Hijack AI Agents Read More »

Hackers Weaponize Claude Code in Mexican Government Cyberattack

Hackers Weaponize Claude Code in Mexican Government Cyberattack 2026-03-01 at 15:02 By Ionut Arghire The AI was abused to write exploits, create tools, and automatically exfiltrate over 150GB of data. The post Hackers Weaponize Claude Code in Mexican Government Cyberattack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Hackers Weaponize Claude Code in Mexican Government Cyberattack Read More »

Trump Orders All Federal Agencies to Phase Out Use of Anthropic Technology

Trump Orders All Federal Agencies to Phase Out Use of Anthropic Technology 2026-02-27 at 23:30 By Associated Press OpenAI and Google, along with Elon Musk’s xAI, also have contracts to supply their AI models to the military. The post Trump Orders All Federal Agencies to Phase Out Use of Anthropic Technology appeared first on SecurityWeek. […]

Trump Orders All Federal Agencies to Phase Out Use of Anthropic Technology Read More »

Anthropic Refuses to Bend to Pentagon on AI Safeguards as Dispute Nears Deadline

Anthropic Refuses to Bend to Pentagon on AI Safeguards as Dispute Nears Deadline 2026-02-27 at 14:50 By Associated Press Anthropic said it sought narrow assurances from the Pentagon that Claude won’t be used for mass surveillance of Americans or in fully autonomous weapons. The post Anthropic Refuses to Bend to Pentagon on AI Safeguards as […]

Anthropic Refuses to Bend to Pentagon on AI Safeguards as Dispute Nears Deadline Read More »

Claude Code Flaws Exposed Developer Devices to Silent Hacking

Claude Code Flaws Exposed Developer Devices to Silent Hacking 2026-02-26 at 19:37 By Eduard Kovacs Anthropic has patched vulnerabilities whose impact was demonstrated by Check Point via malicious configuration files. The post Claude Code Flaws Exposed Developer Devices to Silent Hacking appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Claude Code Flaws Exposed Developer Devices to Silent Hacking Read More »

The Blast Radius Problem: Stolen Credentials are Weaponizing Agentic AI

The Blast Radius Problem: Stolen Credentials are Weaponizing Agentic AI 2026-02-25 at 18:16 By Kevin Townsend More than half (56%) of the 400,000 vulnerabilities IBM X-Force tracked in 2025 required no authentication before exploitation. The post The Blast Radius Problem: Stolen Credentials are Weaponizing Agentic AI appeared first on SecurityWeek. This article is an excerpt […]

The Blast Radius Problem: Stolen Credentials are Weaponizing Agentic AI Read More »

GitHub Issues Abused in Copilot Attack Leading to Repository Takeover

GitHub Issues Abused in Copilot Attack Leading to Repository Takeover 2026-02-24 at 14:26 By Ionut Arghire Attackers can inject malicious instructions in a GitHub Issue that are automatically processed by Copilot when launching a Codespace from that issue. The post GitHub Issues Abused in Copilot Attack Leading to Repository Takeover appeared first on SecurityWeek. This […]

GitHub Issues Abused in Copilot Attack Leading to Repository Takeover Read More »

SURXRAT: From ArsinkRAT roots to LLM Module Downloads Signaling Capability Expansion

SURXRAT: From ArsinkRAT roots to LLM Module Downloads Signaling Capability Expansion 2026-02-24 at 09:07 By rohansinhacyblecom Executive Summary SURXRAT is an actively developed Android Remote Access Trojan (RAT) commercially distributed through a Telegram-based malware-as-a-service (MaaS) ecosystem under the SURXRAT V5 branding. The malware is marketed using structured reseller and partner licensing tiers, allowing affiliates to […]

SURXRAT: From ArsinkRAT roots to LLM Module Downloads Signaling Capability Expansion Read More »

Lema AI Emerges From Stealth With $24 Million to Tackle Third-Party Risk 

Lema AI Emerges From Stealth With $24 Million to Tackle Third-Party Risk  2026-02-09 at 19:42 By Eduard Kovacs The funding was raised over Series A and seed funding rounds for its supply chain security solution. The post Lema AI Emerges From Stealth With $24 Million to Tackle Third-Party Risk  appeared first on SecurityWeek. This article […]

Lema AI Emerges From Stealth With $24 Million to Tackle Third-Party Risk  Read More »

Living off the AI: The Next Evolution of Attacker Tradecraft

Living off the AI: The Next Evolution of Attacker Tradecraft 2026-02-06 at 14:04 By Etay Maor Living off the AI isn’t a hypothetical but a natural continuation of the tradecraft we’ve all been defending against, now mapped onto assistants, agents, and MCP. The post Living off the AI: The Next Evolution of Attacker Tradecraft appeared […]

Living off the AI: The Next Evolution of Attacker Tradecraft Read More »

Airrived Emerges From Stealth With $6.1 Million in Funding

Airrived Emerges From Stealth With $6.1 Million in Funding 2026-02-06 at 12:13 By Ionut Arghire The startup aims to unify SOC, GRC, IAM, vulnerability management, IT, and business operations through its Agentic OS platform. The post Airrived Emerges From Stealth With $6.1 Million in Funding appeared first on SecurityWeek. This article is an excerpt from […]

Airrived Emerges From Stealth With $6.1 Million in Funding Read More »

Researchers Expose Network of 150 Cloned Law Firm Websites in AI-Powered Scam Campaign

Researchers Expose Network of 150 Cloned Law Firm Websites in AI-Powered Scam Campaign 2026-02-05 at 16:59 By Kevin Townsend Criminals are using AI to clone professional websites at an industrial scale. A new report shows how one AI-powered network grew to 150+ domains by hiding behind Cloudflare and rotating IP ranges. The post Researchers Expose […]

Researchers Expose Network of 150 Cloned Law Firm Websites in AI-Powered Scam Campaign Read More »

Nullify Secures $12.5 Million in Seed Funding for Cybersecurity AI Workforce

Nullify Secures $12.5 Million in Seed Funding for Cybersecurity AI Workforce 2026-02-05 at 15:02 By Eduard Kovacs This latest infusion, led by SYN Ventures, brings the company’s total funding to $16.9 million. The post Nullify Secures $12.5 Million in Seed Funding for Cybersecurity AI Workforce appeared first on SecurityWeek. This article is an excerpt from […]

Nullify Secures $12.5 Million in Seed Funding for Cybersecurity AI Workforce Read More »

Critical N8n Sandbox Escape Could Lead to Server Compromise

Critical N8n Sandbox Escape Could Lead to Server Compromise 2026-02-05 at 14:02 By Ionut Arghire The vulnerability could allow attackers to execute arbitrary commands and steal credentials and other secrets. The post Critical N8n Sandbox Escape Could Lead to Server Compromise appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical N8n Sandbox Escape Could Lead to Server Compromise Read More »

Varonis Acquisition of AllTrue.ai Valued at $150 Million

Varonis Acquisition of AllTrue.ai Valued at $150 Million 2026-02-04 at 14:51 By Eduard Kovacs The data security firm has acquired the AI trust, risk, and security management company to expand its capabilities.  The post Varonis Acquisition of AllTrue.ai Valued at $150 Million appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Varonis Acquisition of AllTrue.ai Valued at $150 Million Read More »

DockerDash Flaw in Docker AI Assistant Leads to RCE, Data Theft

DockerDash Flaw in Docker AI Assistant Leads to RCE, Data Theft 2026-02-04 at 13:48 By Ionut Arghire The critical vulnerability exists in the contextual trust in MCP Gateway architecture, as instructions are passed without validation. The post DockerDash Flaw in Docker AI Assistant Leads to RCE, Data Theft appeared first on SecurityWeek. This article is […]

DockerDash Flaw in Docker AI Assistant Leads to RCE, Data Theft Read More »

Security Analysis of Moltbook Agent Network: Bot-to-Bot Prompt Injection and Data Leaks

Security Analysis of Moltbook Agent Network: Bot-to-Bot Prompt Injection and Data Leaks 2026-02-04 at 10:47 By Eduard Kovacs Wiz and Permiso have analyzed the AI agent social network and found serious security issues and threats. The post Security Analysis of Moltbook Agent Network: Bot-to-Bot Prompt Injection and Data Leaks appeared first on SecurityWeek. This article […]

Security Analysis of Moltbook Agent Network: Bot-to-Bot Prompt Injection and Data Leaks Read More »

Vulnerability Allows Hackers to Hijack OpenClaw AI Assistant 

Vulnerability Allows Hackers to Hijack OpenClaw AI Assistant  2026-02-03 at 15:49 By Eduard Kovacs OpenClaw (aka Moltbot and Clawdbot) is vulnerable to one-click remote code execution attacks. The post Vulnerability Allows Hackers to Hijack OpenClaw AI Assistant  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Vulnerability Allows Hackers to Hijack OpenClaw AI Assistant  Read More »

Cyber Insights 2026: Malware and Cyberattacks in the Age of AI

Cyber Insights 2026: Malware and Cyberattacks in the Age of AI 2026-02-02 at 14:03 By Kevin Townsend Security leaders share how artificial intelligence is changing malware, ransomware, and identity-led intrusions, and how defenses must evolve. The post Cyber Insights 2026: Malware and Cyberattacks in the Age of AI appeared first on SecurityWeek. This article is […]

Cyber Insights 2026: Malware and Cyberattacks in the Age of AI Read More »

LLMs Hijacked, Monetized in ‘Operation Bizarre Bazaar’

LLMs Hijacked, Monetized in ‘Operation Bizarre Bazaar’ 2026-01-29 at 17:29 By Ionut Arghire An LLMjacking operation has been targeting exposed LLMs and MCPs at scale, for commercial monetization. The post LLMs Hijacked, Monetized in ‘Operation Bizarre Bazaar’ appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

LLMs Hijacked, Monetized in ‘Operation Bizarre Bazaar’ Read More »

Scroll to Top