Skip to content

Search results for «AI Attack» Page 2

  1. Open Agent Passport Review: Blocking Unauthorized AI Agent Payments

    Open Agent Passport uses signed JSON passports and pre-action checks to stop unpermitted AI agent payments. The APort Vault benchmark shows zero unauthorized transfers across tested models.

    3 min read

  2. PHP security review: CVE-2026-109618 and CVE-2026-109619 Explained

    Critical remote code execution flaws in PHP core demand immediate updates for any site using versions before the October 2026 patches.

    3 min read

  3. TeamUpdraft Review: UpdraftCentral Keys Breach Highlights Supply-Chain Risks for WordPress Sites

    The October 2026 breach of teamupdraft.com exposed connection keys that attackers used to install backdoors on an estimated 400,000 WordPress sites running UpdraftPlus.

    3 min read

  4. AI Agents Security Review: Autonomous Tools Targeting Retailers and Developer Environments

    Autonomous AI agents enabled financially motivated actors to breach over 100 companies in 2026 campaigns against retailers and developer platforms, often at costs under $50 per target.

    3 min read

  5. ConnectWise Cloud Backup review: Supply-chain attack compromises Microsoft 365 tenants

    A compromised credential in ConnectWise Cloud Backup allowed unauthorized Microsoft Graph access across customer tenants in mid-October 2026.

    3 min read

  6. Aoki Infostealer Targets AI Coding Assistants for Credential Theft

    Symantec identified expanded Aoki infostealer variants that harvest credentials from AI coding assistants, enabling LLMjacking and unauthorized access to linked services.

    3 min read

  7. Fintech Data Breach Analysis Reveals AI Attacks on 16 South Korean Firms

    AI-driven attacks hit 16 South Korean financial institutions in late 2026, exposing roughly 100,000 personal records. This analysis details the timeline, affected sectors, and inspection findings.

    3 min read

  8. Domain Registrar Security Risks: ccTLD Registry Hijacks Enable Unauthorized Certificates

    Registry-level compromises in three ccTLDs led to unauthorized TLS certificates for major domains. The incidents reveal gaps in domain registrar security controls and DNS validation processes.

    3 min read

  9. ConnectWise Security Review: Supply-Chain Incident Impact on Microsoft 365 Tenants

    The October 2026 compromise of ConnectWise Cloud Backup credentials allowed unauthorized access to 162–173 Microsoft 365 tenants. This review details the timeline, permissions abused, and recommended actions.

    3 min read

  10. Gopax Security Review: Data Breach Details and Trustworthiness Assessment

    Gopax experienced a limited data exposure in October 2026 affecting nine accounts. The exchange remains a licensed South Korean VASP with ISMS and ISO certifications but lacks full personal data protection certification.

    3 min read

  11. Brevo Security Review: Lessons from SSO and Supply-Chain Incidents

    Two September 2026 incidents exposed authorization gaps in Brevo’s SSO and a hardcoded Cloudflare credential. The platform restored service quickly, yet the events underscore script and credential risks for email marketing users.

    3 min read

  12. AI Tools Security Review Shows Critical Observability Gaps in Public AI Agents

    The Partnership on AI report identifies six telemetry gaps that limit monitoring of publicly available AI agents and increase risks during scaling.

    3 min read