In this episode of Below the Surface, host Paul Asadoorian is joined by Eclypsium’s Vlad Babkin for a wide-ranging discussion on the latest infrastructure security risks, beginning with the August ...

Marky is not a chatbot. It's an agent that takes a task and carries it end to end and it can launch subagents for ...

Hackers are exploiting a critical Langflow flaw that lets unauthenticated attackers remotely execute Python code on ...

Johann Rehberger’s Python module-shadowing attack achieves remote code execution 60-80 percent of the time against a feature ...

A new ClickFix variant dubbed TerminalFix uses fake Cloudflare CAPTCHA prompts on compromised websites to trick victims into ...

A prompt-injection demonstration has shown how Anthropic’s Claude Code Opus 5 can be steered from a website-summary task into ...

Claude Code Opus 5’s Auto Mode can be tricked into running malicious code via a simple website-summary request, succeeding in ...

Rob Allen from ThreatLocker joins us to discuss securing agentic AI with zero-trust controls, least privilege, and access ...

NVIDIA reported revenue of $96.2 billion for the second quarter of fiscal 2027, ended July 26, 2026, up 18% from the previous ...

LLM security testing for pentesters: map attacks to the OWASP LLM Top 10, break a vulnerable MCP server locally, and turn ...

IBM has released Granite 4.2, its first family of dense, decoder-only reasoning language models, in three sizes: 3B, 8B, and ...

WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader uses Teams phishing to steal Windows login ...