The new “agentjacking” attack takes almost no real hacking ability to pull off. It's predicated on pulling a public ...

Microsoft details AutoJack exploit chain targeting AutoGen Studio MCP WebSocket in pre-release builds, enabling ...

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...

IntroductionOn May 14, 2026, the Zscaler ThreatLabz team identified unusually high activity associated with the threat actor SmartApeSG to deploy malware. During our examination, we discovered ...

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...

Three popular plugins served malicious JavaScript through a compromised CDN.

This is probably the dictionary illustration for "deceptively simple." ...

Chrome's WebMCP guidance warns that AI agents can be manipulated through the tools they are built to trust.

OpenAI announced a new feature that it says will provide additional protection from prompt injection attacks, where malicious chatbot instructions are hidden in web pages and other content sources.

OpenAI Rolls Out Lockdown Mode to Fight Prompt Injection Attacks The new feature promises increased protection against these types of attacks, but you'll have to sacrifice a lot of functionality, ...

OpenAI has begun rolling out Lockdown Mode, an optional security setting designed to offer users advanced protection from prompt injection attacks. For the unfamiliar, prompt injection is a form of ...

Add Decrypt as your preferred source to see more of our stories on Google. Prompt injection is the number one security risk for AI applications. The attack works by tricking a chatbot into following ...