The second critical advisory in five weeks exposes how AI agent workflows amplify the blast radius of infrastructure flaws in enterprise environments.

CISA added Microsoft SQL Server RCE flaw CVE-2019-1068 to its KEV catalog after confirming active exploitation.

Google Cloud has introduced AI-powered Database Operations Agents, featuring an Onboarding Agent that streamlines database ...

Gambit Security's threat intelligence team has published a detailed account of the Aurora ransomware operation, including six ...

SonarQube Hunter Agent uses AI to detect broken access control, business logic flaws, and authentication vulnerabilities traditional SAST can miss.

SandboxAQ has released Switch, software that pulls AI agents built on rival frameworks into the same Slack, Microsoft Teams, ...

一个攻击者要求 Agent 交出公司的模型 API Key，Agent 很可能会拒绝，因为密钥属于敏感信息；但如果攻击者换一种说法，让 Agent 直接使用已经配置好的接口批量生成几十万条数据，它却可能立即开始执行。