Google has fixed the issues, which exploited a trust boundary between two AI agents with different privileges to potentially ...

ARC-AGI-3 benchmark gains its first fully open-source agent: NIMI's Tycho writes Python code as falsifiable hypotheses about ...

The flaws show how agentic workflows can turn trusted repository signals into privilege-escalation paths that conventional ...

Google removed 3 ADK AI workflows after Pillar showed a public GitHub issue could trigger a privileged agent & reach code ...

The Open Secure AI Alliance introduced SAFE guidelines and open agent-security tools at Black Hat, giving enterprises a ...

Twelve datasets and evaluation systems, built by hand from thousands of real-world security flaws, give model builders and ...

A roundup of the latest noteworthy AI-assisted attacks, threats, risks, and vulnerabilities, and what they portend for cyber defense.

Millions of AI agents and tools around the world have been imperiled by a critical vulnerability that can allow hackers to breach the servers running them and make off with sensitive data and ...

Microsoft says Agent Framework 1.0 is the production-ready release, with stable APIs and long-term support for both .NET and Python. The framework is presented as a unified successor path that builds ...

At Black Hat USA, Zenity Labs today announced new research detailing an active credential-stealing malicious skills campaign distributed through Vercel's skills.sh. The affected skill family amassed ...

AI agent flaws in AWS, Google, and Vercel let forged tool calls reach tools without model authorization, while several paths ...