Attackers have begun embedding hidden instructions in websites to target AI agents, according to new research. Zscaler's ...

AI-native web browsers make it easier to get information and perform tasks online, but they also come with more security ...

Opera GX patched a flaw that let malicious sites silently install GX Mods and leak a signed-in user’s Gmail address with CSS.

Indirect prompt injection attacks are now draining cryptocurrency from AI agents in production. Zscaler ThreatLabz documented ...

Singer Bonnie Tyler, known for hits including Total Eclipse of the Heart, Holding Out for a Hero and It's a Heartache, has ...

Google tightened the "Good" LCP threshold from 2.5 to 2.0 seconds in March 2026, and promoted INP from supplementary to a ...

Discover the AI Agent Safety Directory that evaluates AI agents before deployment with trusted safety ratings, risk insights, and performance benchmarks.

Zscaler found attackers using SEO poisoning and hidden prompts in malicious websites to manipulate AI agents into making cryptocurrency payments.

Named after BioShock's 'Would you kindly' mechanic, the attack trains AI agents to accept false information before stealing ...

A prompt injection attack can trick GitHub’s preview Agentic Workflows into retrieving content from private repositories and ...

A critical prompt injection vulnerability in GitHub Agentic Workflows could allow unauthenticated attackers to leak private repository data, ...

In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are ...