Documentation files on more than 100 websites are referencing potentially dangerous executable content that gets installed ...

WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader uses Teams phishing to steal Windows login ...

A ransomware affiliate weaponized Claude Code to autonomously steal LDAP credentials, backdoor VPNs, and exfiltrate SQL ...

New Cryptographic Context Injection technique bypasses AI guardrails via AES-encrypted payloads, leaking full Grok chat ...

A newly disclosed prompt-injection technique can reportedly turn a routine “summarize this page” request in xAI’s Grok web ...

A newly disclosed attack can turn a routine “summarize this page” request in xAI’s Grok web chat into a silent theft of the ...

Researchers say the new ‘Cryptographic Context Injection’ technique conceals malicious instructions until they are decrypted inside a trusted execution environment.

Security researchers found that Claude Code can be pushed into confidently reporting incorrect results while analyzing ...

Adversa AI says Grok still leaks user names, location, and full chat history to attackers hiding encrypted commands on a web ...

Adversa says encrypted prompt injection can make Grok send a user's name, location, tier, and chat prompts to an ...

xAI's Grok web chat agent is currently vulnerable to a novel form of prompt injection, according to security researchers with ...