OpenClaw’s AI Assistant Tricks Reveal User Data
Security researchers found OpenClaw's email AI agent vulnerable to AI agent phishing attacks that fooled the system into revealing sensitive user information.
Secure.com News
Stay updated with the latest cybersecurity news, threat intelligence, and industry updates from secure.com.
Browse by Category
Anthropic Takes Different Approach With Claude Fable 5 Security Split
Anthropic launched Claude Fable 5, its most advanced AI model to date, with an unusual dual-product approach focused on cybersecurity safeguards.
ClickFix Attack Chain Delivers Sophisticated MLTBackdoor Malware
Security researchers have identified a sophisticated MLTBackdoor malware attack that uses a multi-stage ClickFix infection chain to infiltrate target systems.
LiteLLM Security Bug Exploited for Unauthorized Access
Cybercriminals are actively exploiting a critical LiteLLM RCE vulnerability that allows remote command execution on AI gateway systems.
MCP Developers Under Fire as Shai-Hulud Campaign Grows to 60 Packages
The Shai-Hulud PyPI attack has expanded to compromise 23 additional Python packages, bringing the total number of affected packages to 60.
New Hades Malware Deceives AI Security Systems
A new Hades malware campaign is targeting software supply chains by using deceptive tactics to fool AI-powered security systems.
Multiple VMware Stored XSS Vulnerabilities Allow Attackers to Inject Malicious Scripts
Broadcom has disclosed three stored VMware XSS vulnerabilities that allow authenticated attackers to inject malicious scripts into enterprise systems.
Internet Explorer WebBrowser Control Attack Chain Turns Clicks Into RCE
Security researchers found that Internet Explorer WebBrowser control can still turn a single click into remote code execution on Windows systems.
CISA Flags Actively Exploited SolarWinds Vulnerability as Critical Threat
CISA added a critical SolarWinds Serv-U vulnerability to its Known Exploited Vulnerabilities catalog following confirmed active exploitation attempts.
New Payload Ransomware Uses Military-Grade Encryption to Lock Windows Files
Dateline: May 26, 2026 Quick Verdict A sophisticated ransomware operation called Payload has been quietly building a global victim list since February 2026, using advanced encryption...
GitHub Adds Staged Publishing to npm to Block Automated Supply Chain Attacks
GitHub has rolled out staged publishing for npm to combat npm supply chain attacks targeting the JavaScript ecosystem.
Megalodon Malware Compromised 5,500+ GitHub Repos Within 6 Hours
The Megalodon malware attack compromised over 5,500 GitHub repositories within six hours, marking the largest automated supply chain breach in platform history.