AI agents are changing how attackers operate. Explore real-world cases of agentic attacks, learn how to identify their fingerprints, and discover what they mean for the future of cybersecurity.
This page shows only the headline and the short summary. The full text is published by the original source.
An automated campaign is planting secret-dumping workflows in every repository that stolen GitHub tokens can reach. It uses no C2 server, is actively evolving, and has been significantly disrupted by recent GitHub security improvements.
Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.
Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.
In a new incident, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version includes a credential stealer targeting browser, cloud and AI secrets as well as a dormant C2 capability.
