AI agent exploits Langflow in first fully autonomous ransomware attack

has documented what it says is the first ransomware operation carried out from start to finish by an autonomous artificial ...
PC Tech Magazine

Zero Data Retention: How to Enforce It Across AI Providers

When you send a prompt to an AI provider, something happens to that text before the response arrives. Most providers store it ...

Azure CLI Password Spray Attack Exposes Microsoft 365 MFA Gap

Attackers used Azure CLI and ROPC to expose Microsoft 365 MFA gaps, showing why admins need tighter Conditional Access and ...

JadePuffer ransomware used AI agent to automate entire attack

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted ...

ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...
The Hacker News

AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.
SecurityWeek

Massive Password Spray Campaign Targeting Azure CLI

Threat actors have made over 81 million login attempts in a massive password spray campaign targeting Azure CLI.
IEEE

Rethinking Targeted Data Poisoning in Voice Authentication: A Critique and Defense Mechanism

Abstract: Recent deep learning techniques have significantly improved voice authentication systems. However, they remain vulnerable to threats, including data poisoning and Man-in-the-Middle (MitM) ...
IEEE

A Blockchain-Based Mutual Authentication Scheme With Data Sovereignty for IoT-Based Healthcare Digital Twin Environments

Abstract: Healthcare digital twin (HDT) is an emerging technology that can improve human life by enabling disease prediction, real-time diagnosis, and personalized prescription from healthcare data of ...