The new “agentjacking” attack takes almost no real hacking ability to pull off. It's predicated on pulling a public ...

Three popular plugins served malicious JavaScript through a compromised CDN.

JavaScript: Critical for web security testing, identifying client-side vulnerabilities, and understanding common attack vectors like XSS. Java: Commonly used in enterprise systems, making it important ...

Microsoft details AutoJack exploit chain targeting AutoGen Studio MCP WebSocket in pre-release builds, enabling ...

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...

IntroductionOn May 14, 2026, the Zscaler ThreatLabz team identified unusually high activity associated with the threat actor SmartApeSG to deploy malware. During our examination, we discovered ...

Microsoft’s AutoJack research shows how a malicious webpage rendered by an AI browsing agent can reach local MCP services and ...

Explore the latest news and expert commentary on Application Security, brought to you by the editors of Dark Reading ...

Stressors, AI Forcing Changes to Cybersecurity Teams As threats proliferate and AI complicates cybersecurity, CISOs say the job is getting harder, but more companies still want cybersecurity expertise ...