The high volume of vulnerabilities reflects a growing trend researchers have been anticipating as artificial intelligence models are deployed to find previously uncovered defects in code.

ShinyHunters, a prolific cybercrime group, threatened to leak data from more than 8,800 school systems.

Researchers found artifacts in the code that proved AI was heavily involved. A prominent cybercrime group planned to exploit the zero-day en masse for financial gain.

Agentic AI is more popular than ever, but researchers keep finding trivial ways to hijack LLMs for nefarious purposes.

The vendor hasn’t released a patch for the vulnerability or described the scope and objective of confirmed attacks.

The actively exploited defect could affect every mainstream Linux distribution built since 2017, but some researchers found Theori’s AI-generated disclosure unhelpful and lacking.

The agency added the flaw to the KEV list days after hosting providers confirmed active, ongoing attacks.

CrowdStrike says The Com-affiliated threat groups are using voice phishing and fake SSO pages to break into SaaS environments and steal data fast for extortion.

Xu Zewei was allegedly directed by China’s intelligence services to conduct a sweeping espionage campaign to steal data on COVID-19 research and other U.S. policy interests.

Investigators found the malware, dubbed Firestarter, on a federal agency's network in a campaign dating back to at least September 2025.