Agentic Hacker Exploits Langflow RCE to Encrypt AI and Machine-Learning Infrastructure
JADEPUFFER, an agentic ransomware operation, has evolved from database extortion into a targeted campaign against AI and machine-learning infrastructure.
The operator exploited the Langflow...
Malicious AI Skills Reach Public Registries and Accumulate 14 Million Downloads
Security researchers have uncovered a large FakeGit malware operation that used malicious GitHub repositories, public AI registries, and AI-agent-readable installation instructions to distribute the...
New AI Penetration Testing Framework Covers Prompt Injection, Data Poisoning, and Agentic Tool Misuse
Security teams are increasingly deploying large language models, retrieval-augmented generation platforms, autonomous agents, and AI copilots inside business applications.
However, many organizations still assess...
Hackers Scan for Exposed MCP Servers, AI Assistant Credentials, and Unauthenticated LLM Endpoints
Hackers are actively scanning the internet for exposed Model Context Protocol (MCP) servers, AI assistant configuration files, and unauthenticated local large language model (LLM)...
Indirect Prompt Injection Attacks Hide Malicious Instructions in Websites to Target AI Agents
As artificial intelligence agents become deeply integrated into everyday web browsing and automated tasks, threat actors are adapting their strategies to exploit this new...