JADEPUFFER exploits Langflow CVE-2025-3248 to deploy ENCFORGE ransomware against AI model weights, vector indexes, and training data on the host.

The JadePuffer autonomous AI agent has upgraded with custom malware called EncForge that focuses on encrypting AI assets, ...

Cryptoparties were the answer to the Snowden revelations. But what has become of the movement and how has the fight for ...

CodeMender actively builds and runs exploits in customer-managed sandboxes to verify if vulnerabilities are truly exploitable ...

Explore the latest news and expert commentary on Endpoint Security, brought to you by the editors of Dark Reading ...

Apple’s OpenAI lawsuit: The lunacy of trying to limit what ex-employees can tell future employers The upshot of the company’s legal broadside is that former Apple employees can’t leverage what they ...

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

The agentic operator documented as the first ransomware campaign run end-to-end by a large language model (LLM) has returned ...

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices belonging to sensitive organizations in Ukraine, the latter country’s CERT ...

13 Min Read by Rob Wright, Senior News Director Vulnerabilities & Threats 25 Years After Code Red: What the Worm Era Can Teach Us About AI Security Jul 20, 2026 +1 by Marc Maiffret, James Maude and 1 ...