Hugging Face disclosed that attackers breached its production infrastructure using an autonomous AI agent attack. The attackers gained access to internal datasets and credentials by exploiting vulnerabilities in the company’s…
For the latest discoveries in cyber research for the week of 20th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Ernst & Young, a global accounting and…
As AI becomes embedded in customer experiences, internal workflows, and throughout the supply chain, security leaders are being asked to do more than manage risk. They are being asked to…
Executive summary An MDR alert recently led our team to an exposed server that was doing more than hosting payloads. It was functioning as a fully operational malware delivery lab….
Andrzej Matykiewicz | Wednesday, 6 August 2025 at 22:22 UTC The Hidden Threat That’s Slipping Past Your Security HTTP request smuggling remains one of the most dangerous yet frequently overlooked…
The F5 Labs Weekly Threat Bulletin The F5 Labs Weekly Threat Bulletin is a weekly report designed to be your earliest warning system, condensing the overwhelming threat landscape into a…
Executive Summary On July 14, 2026, attackers compromised release processes connected to the AsyncAPI open- source project and published malicious versions of four widely used npm packages with a combined…
With remote work becoming the norm, today’s organizations face a critical challenge: ensuring that users accessing their systems and data are in fact who they claim to be. Given our…
Western intelligence agencies that form the Fives Eyes alliance issued a statement warning that frontier AI models such as Claude Mythos are “fundamentally transforming both offensive and defensive cyber capabilities”…
Active Exploitation of CVE-2025-55182 Critical RCE in React Server Components and Next.js CVE-2025-55182 represents a critical pre-authentication Remote Code Execution (RCE) vulnerability, rated with a CVSS score of 10.0, affecting…
