Enterprise Security Tech

A newly disclosed vulnerability in an open source AI agent framework is highlighting the emerging security risks tied to autonomous systems that can directly execute commands on host machines. Security researchers have identified a flaw in the MS-Agent framework, a toolset designed to build autonomous AI agents capable of generating code, analyzing datasets, and interacting with external utilities. The vulnerability, tracked as CVE-2026-2256 , allows attackers to manipulate h

For decades, small and medium-sized businesses measured survival against economic turbulence. Inflation, labor shortages, and recession cycles traditionally shaped executive anxiety. In 2026, that calculus has changed. According to VikingCloud ’s 2026 SMB Threat Landscape Report , cybersecurity now ranks as the number one threat to small and medium-sized businesses across North America, surpassing inflation, recession, and workforce instability. In a survey of 200 SMB owners

By any measure, the past few days have marked a dramatic military escalation across the Middle East. But according to multiple cybersecurity leaders, the digital phase of this conflict was already well underway long before the first drone crossed a border. Security researchers describe a coordinated surge in API probing, industrial control system targeting, and disruptive infrastructure attacks that suggest a hybrid campaign blending kinetic strikes with cyber operations desi

An alleged data breach at CarGurus has exposed the personal information of millions of customers, marking one of the largest automotive marketplace security incidents reported this year. According to Have I Been Pwned , the breach affects approximately 12.5 million user accounts. The breach tracking service, run by security researcher Troy Hunt, attributes the intrusion to the hacking collective ShinyHunters. What Was Exposed The dataset allegedly includes names, email addres

Within a single workday, a routine npm install turned into a supply chain incident that is now reverberating across the open source and AI security communities, according to an analysis from Michael Bargury, CTO of Zenity . The maintainers of Cline disclosed that version 2.3.0 of the Cline CLI was published to npm with unauthorized modifications. For roughly eight hours, developers who installed the package also pulled code associated with the OpenClaw ecosystem due to a mali

A widely downloaded mobile app called Chat & Ask AI has exposed what may be one of the largest known leaks of private AI chatbot conversations to date. An independent security researcher says the app left hundreds of millions of user messages publicly accessible online, including deeply sensitive and, in some cases, dangerous requests. Chat & Ask AI has surpassed 50 million installs across the Google Play Store and Apple App Store, positioning it as one of the most popular t