Is an AI-to-AI attack scenario a science fiction possibility only for blockbusters like the Terminator series of movies? Well, maybe not! Researchers recently discovered that one AI agent can “inject malicious instructions into a conversation, hiding them among otherwise benign client requests and server responses.” While known AI threats involve tricking an agent with malicious data, this new threat exploits a property of the Agent2Agent (A2A) protocol to remember recent interactions and maintain coherent conversations.…
Lefteris Tzelepis, CISO at Steelmet /Viohalco Companies, was shaped by cybersecurity. From his early exposure to real-world attacks at the…
This is a predictions blog. We know, we know; everyone does them, and they can get a bit same-y. Chances…
The attack landscape has been dynamic following the disclosure of the React Server Components RCE vulnerability. New information has emerged…
As the year draws to a close, it’s worth pausing to look back on what has been an extraordinary year…
On December 3, 2025, React maintainers disclosed a critical unauthenticated remote code execution (RCE) vulnerability in React Server Components (RSC),…
The API supply chain is the new security blind spot. Attackers no longer need to breach your APIs directly; they…
Earlier this month, Microsoft uncovered SesameOp, a new backdoor malware that abuses the OpenAI Assistants API as a covert command-and-control…
Can you ever imagine the impact on your business if it went offline on Black Friday or Cyber Monday due…
Over the past few years, API security has gone from a relatively niche concern to a headline issue. A slew…