Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious ...

Your AI agents need a terminal, not just a vector database

DCI lets AI agents search raw files with grep and bash instead of embeddings — boosting accuracy 11 points and cutting ...
Ars Technica

Open source package with 1 million monthly downloads stole user credentials

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a vulnerability in the developers’ account workflow that gave access to its signing keys ...
TechCrunch

Anthropic created a test marketplace for agent-on-agent commerce

In a recent experiment, Anthropic created a classified marketplace where AI agents represented both buyers and sellers, striking real deals for real goods and real money. The company admitted this ...
TechCrunch

Google makes an interesting choice with its new agent-building tool for enterprises

Google CEO Sundar Pichai opened the Google Cloud Next conference on Wednesday with a video in which he announced one of the company’s biggest new products: Gemini Enterprise Agent Platform. Google’s ...
CSOonline

Azure SRE Agent flaw lets outsiders silently eavesdrop on enterprise cloud operations

A multi-tenant authentication gap in Microsoft’s AI operations agent exposed live command streams, internal reasoning, and credentials to any Entra ID account, researchers said. A high-severity ...
MarketWatch

The March jobs report isn’t as good as it looks. Here are the bad parts.

The U.S. economy created the most new jobs in March in almost a year and a half, so happy days are here again for frustrated jobseekers, right?Unfortunately, no. The estimated 178,000 increase in new ...
The New York Times

Strong Showing for Job Market in Latest Report

U.S. employers added 178,000 jobs in March, and the unemployment rate ticked down to 4.3 percent, a robust showing after a run of weakness. Note: Data is seasonally adjusted. The average is calculated ...
Ars Technica

Here’s what that Claude Code source leak reveals about Anthropic’s plans

Yesterday’s surprise leak of the source code for Anthropic’s Claude Code revealed a lot about the vibe-coding scaffolding the company has built around its proprietary Claude model. But observers ...
Time

AI Alone Won't Take Your Job. Someone Using AI Will

AI won’t replace you at work, but someone using AI likely will. Maybe not today or tomorrow. Maybe not this year or even next. But eventually. And if you wait for eventually, it will be too late. For ...
Bleeping Computer

Claude Code source code accidentally leaked in NPM package

Anthropic says it accidentally leaked the source code for Claude Code, which is closed source, but the company says no customer data or credentials were exposed. While Anthropic pledges support to the ...
VentureBeat

Claude Code's source code appears to have leaked: here's what we know

VentureBeat made with Google Gemini 3.1 Pro Image Anthropic appears to have accidentally revealed the inner workings of one of its most popular and lucrative AI products, the agentic AI harness Claude ...