Search: “agent security”

277 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 546 Ransomware 397 Vulnerability 277 Data breach 210 Threat actor 171 Malware 91 AI safety & security 75 Policy & legal 54 Phishing & fraud 28 AI industry 18 Model release 16 Advisory 10 AI policy 3 Research 1

SeverityAll critical 1570 high 205 medium 66 low 0 info 58

Microsoft’s agentic security system found four critical Windows RCE flaws

Help Net SecurityMay 13, 00:00 UTC · May 13, 2026Vulnerability CVE-2026-40361 CVE-2026-403641

Week in review: Cisco SD-WAN 0-day exploited, Patch Tuesday forecast

Help Net SecurityJun 7, 00:00 UTC · Jun 7, 2026Vulnerability in the wildCVE-2026-0257 CVE-2026-41089 CVE-2025-48595+1 CVEs

Week in review: Cisco patches SD-WAN 0-day, unpatched Microsoft Exchange Server flaw exploited

Help Net SecurityMay 17, 00:00 UTC · May 17, 2026Vulnerability in the wildCVE-2026-44413 CVE-2026-41940 CVE-2026-46300+2 CVEs1

Microsoft Fixes 17 Critical Flaws in May Patch Tuesday

Infosecurity MagazineMay 13, 08:15 UTC · May 13, 2026Vulnerability CVE-2026-41089 CVE-2026-41096 CVE-2026-42898

Actively exploited Trend Micro Apex One flaw gets CISA warning (CVE-2026-34926)

Help Net SecurityMay 26, 00:00 UTC · May 26, 2026Vulnerability in the wildCVE-2026-34926

Week in review: Weaponized OAuth redirection logic delivers malware, Patch Tuesday forecast

Help Net SecurityMar 8, 00:00 UTC · Mar 8, 2026Vulnerability CVE-2025-14500 CVE-2026-28289 CVE-2026-20128+1 CVEs

OpenAI Codex Security Scanned 1.2 Million Commits and Found 10,561 High

The Hacker NewsMar 7, 16:28 UTC · Mar 7, 2026Vulnerability CVE-2026-24881 CVE-2026-24882 CVE-2025-32988+10 CVEs

New malicious web shell from the Tropic Trooper group is found in the Middle East

Kaspersky SecurelistSep 5, 08:02 UTC · Sep 5, 2024Vulnerability in the wildCVE-2021-34473 CVE-2021-34523 CVE-2021-31207+1 CVEs

⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-346212

Google AI "Big Sleep" Stops Exploitation of Critical SQLite Vulnerability Before Hackers Act

The Hacker NewsJul 20, 15:49 UTC · Jul 20, 2025Vulnerability in the wildCVE-2025-6965

Week in review: Exploited newly patched BeyondTrust RCE, United Airlines CISO on building resilience

Help Net SecurityFeb 15, 00:00 UTC · Feb 15, 2026Vulnerability in the wildCVE-2026-1731 CVE-2024-12356 CVE-2026-1281+2 CVEs

YesWeHack automates penetration testing with AI-powered agents

Help Net SecurityJun 25, 00:00 UTC · Jun 25, 2026Vulnerability in the wild

Week in review: cPanel vulnerability actively exploited, DigiCert breach, LinkedIn job scams

Help Net SecurityMay 10, 00:00 UTC · May 10, 2026Vulnerability in the wildCVE-2026-41940 CVE-2026-4670 CVE-2026-5174+4 CVEs

Wiz AI Agent Finds Critical Snowflake GitHub Repo Flaw Advanced Security Missed

Wiz's AI agent uncovered a critical flaw in Snowflake's GitHub Actions workflow that GitHub Advanced Security scans had missed.

A Wiz researcher, using the company's AI security agent, discovered a critical security flaw in Snowflake's GitHub Actions workflow. The flaw had been missed by a GitHub Advanced Security scan, highlighting gaps in automated coverage for CI/CD pipelines. No CVE identifier or evidence of active exploitation was provided in the report.

Infosecurity MagazineAug 18, 15:30 UTC · 29d agoVulnerability

AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs

The Hacker NewsJun 6, 07:28 UTC · Jun 6, 2026Vulnerability CVE-2026-39210 CVE-2026-39218 CVE-2026-10881

Vuln in Google’s Antigravity AI agent manager could escape sandbox, give attackers remote code execution

CyberScoopApr 21, 15:43 UTC · Apr 21, 2026Vulnerability in the wild

Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logs

Help Net SecurityJul 19, 00:00 UTC · Jul 19, 2026Vulnerability in the wildCVE-2026-15409 CVE-2026-15410 CVE-2026-56155+2 CVEs

⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0

The Hacker NewsJul 21, 04:34 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-63030 CVE-2026-60137 CVE-2026-15409+26 CVEs1

Microsoft's MDASH AI System Finds 16 Windows Flaws Fixed in Patch Tuesday

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Vulnerability CVE-2026-33824 CVE-2026-338271

Ordr SCE 7.2: Enabling orgs to monitor for risks and proactively strengthen infrastructure

Help Net SecurityJul 3, 00:00 UTC · Jul 3, 2020Vulnerability in the wild

PAN-OS RCE Exploit Under Active Use Enabling Root Access and Espionage

The Hacker NewsMay 7, 17:58 UTC · May 7, 2026Vulnerability in the wildCVE-2026-0300

Week in review: Cisco fixes IMC bug, Patch Tuesday forecast, Black Hat USA 2026

Help Net SecurityAug 9, 00:00 UTC · Aug 9, 2026Vulnerability CVE-2026-66066 CVE-2026-185771

JumpCloud Windows Agent Flaw Enables Local Privilege Escalation

Infosecurity MagazineDec 16, 16:00 UTC · Dec 16, 2025Vulnerability CVE-2025-34352

AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCE

The Hacker NewsMar 17, 16:39 UTC · Mar 17, 2026Vulnerability in the wildCVE-2026-25750 CVE-2026-3059 CVE-2026-3060+1 CVEs

RSA Authentication SDK affected by two critical vulnerabilities, patch it now!

Security AffairsDec 4, 08:15 UTC · Dec 4, 2017Vulnerability CVE-2017-14377 CVE-2017-14378

Crooks turn HexStrike AI into a weapon for fresh vulnerabilities

Security AffairsSep 3, 19:43 UTC · Sep 3, 2025Vulnerability in the wildCVE-2025-7775 CVE-2025-7776 CVE-2025-8424

ServiceNow patches critical AI platform flaw that could allow user impersonation

CyberScoopJan 13, 15:47 UTC · Jan 13, 2026Vulnerability CVE-2025-12420

Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI Malware

The Hacker NewsFeb 23, 11:00 UTC · Feb 23, 2026Vulnerability in the wildCVE-2026-2441 CVE-2026-1731 CVE-2026-20700

ASUS Control Center Critical Flaw Allows Unauthenticated Attackers to Gain Root Access

ASUS patched CVE-2026-19397 (CVSS 7.7) in Control Center Express Agent, letting unauthenticated nearby attackers with an active session take over the host.

ASUS released version 1.7.24 of Control Center Express Agent to fix CVE-2026-19397, a CWE-306 missing-authentication flaw scored 7.7 on CVSS v4. Exploitation requires an active login session on the target and nearby network access, and agent compromise could lead to complete device takeover where the agent runs with elevated privileges. ASUS also issued a same-day advisory for Armory Crate covering ten additional CVEs.

GBHackersSep 8, 10:37 UTC · 8d agoVulnerability CVE-2026-19397 CVE-2026-12962 CVE-2026-18023+8 CVEs