Researchers escaped the sandboxes in Cursor, Codex, Gemini CLI and Antigravity by having the AI agent write files that trusted host tools later run. Multiple CVEs, patches, and Google downgrading two ...

Researchers escaped the sandboxes in Cursor, Codex, Gemini CLI, and Antigravity by exploiting files trusted host tools run.

JADEPUFFER exploits Langflow CVE-2025-3248 to deploy ENCFORGE ransomware against AI model weights, vector indexes, and ...

Researchers escaped the sandboxes of Cursor, Codex, Gemini CLI and Antigravity without breaking them. Three vendors patched; Google downgraded its two.

Microsoft's newly released Agent Framework Harness packages the loops, planning, memory, context management and safety controls that developers previously had to assemble around AI models themselves.

Discover how the Rogue Agent vulnerability in Google Dialogflow CX enabled persistent AI agent compromise, data exfiltration, ...

A Russian-speaking threat actor known as "bandcampro" used Google's open-source Gemini CLI AI tool as a hacking agent and to ...

Securing the modern enterprise is no longer about patching individual gaps. Agentic Endpoint Security (AES) is now a ...

As governments, critical infrastructure operators, and software organizations increasingly integrate autonomous AI agents into security operations, the Friendly Fire research highlights an unresolved ...

This photograph shows a screen during the 18th edition of the "InCyber" Forum, an international cyber security event, at the Grand Palais in Lille, northern France on April 1, 2026. The forum, which ...

JadePuffer, a ransomware operation, used an AI agent to carry out much of the intrusion chain from reconnaissance, key theft, database encryption and even ransom note generation.

Microsoft is extending Dataverse into coding-agent marketplaces while expanding its MCP tools, certification program and governance controls.