CISA has added five actively exploited vulnerabilities affecting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities catalog.
Researchers have linked a RubyGems campaign involving thousands of malicious packages to OpenAI agents, with activity targeting RubyDoc servers and attempting data access operations.
Microsoft is reducing direct Claude Code licenses for employees and transitioning engineers to GitHub Copilot CLI across major product teams including Windows, Teams, Outlook, and Microsoft 365.
Google fixes Antigravity IDE vulnerability enabling prompt injection based code execution as researchers uncover wider AI tool security flaws across coding agents and platforms.