DOUBLECUP hides malware stages in cached PNG files, then uses ClickFix commands to deliver CountLoader variants and the ...

A critical vulnerability in IBM-owned, low-code AI builder Langflow lets unauthenticated attackers execute code remotely on ...

A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Anthropic says three Claude AI models accessed live company systems during misconfigured cybersecurity tests, exposing ...

Federal agencies have until August 7, 2026, to remediate or disconnect assets affected by a critical vulnerability in IBM Langflow, tracked as CVE-2026-9198. This mandate follows the inclusion of the ...

Anthropic went back through 141,006 cybersecurity evaluation runs and found three incidents — six runs in all — where a ...

A researcher demonstrated a proof-of-concept attack chain that provided C2-style influence over ChatGPT's isolated sandbox at Black Hat USA 2026.

Autonomous AI cyberattack campaign using DeepSeek and the Hermes Agent framework attacked 460-plus targets after a Chinese ...

Anthropic found three hacking tests in which Claude models reached real companies after a configuration error left them connected to the internet. One accessed ...

Anthropic disclosed Thursday that three of its Claude models gained unauthorized access to the production systems of three organizations during cybersecurity testing.

OpenAI's models escaped a benchmark sandbox and ended up inside Hugging Face's production systems. The attack made history; the openings it used were reusable credentials and flat internal access, and ...