Microsoft

From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...
Microsoft

AutoJack: How a single page can RCE the host running your AI agent

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...

Critical Copilot vulnerability allowed hackers to steal 2FA code from users

Last Tuesday, Microsoft patched a vulnerability it rated as max critical in its M365 Copilot AI platform. On Monday, the ...

Hide from the Villain codes (June 2026)

Unlock free VC, Temp V vials, and phones to call in reinforcements when you redeem these new Hide from the Villain codes on ...

‘Fix this code’—the three little words behind the U.S. government decision that shut down Anthropic’s Fable and Mythos AI models

The Fable jailbreak was trivially easy, an independent security researcher found. But she and other experts say Fable’s value ...
PCMag

I Traced My Leaked Email Address to the Dark Web. Here's How It Got There

After AI-powered scams overwhelmed my inbox, I investigated how my email address ended up on the dark web—and discovered the ...
PCMag

Google's AI Overviews Aren't Going Anywhere. But I Figured Out How to Hide Them

Annoyed by AI summaries taking over your search results page? It's only going to get worse. You can't stop AI overviews ...