Proof-of-concept exploit code has been published for a critical remote code execution flaw in protobuf.js, a widely used ...

The prompt injection issue in the agentic AI product for filesystem operations was a sanitization issue that allowed for ...

CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...

A prompt injection flaw in Google’s Antigravity IDE turns a file search tool into a remote code execution vector, bypassing ...

PowMix targets Czech workforce since Dec 2025 using jittered C2 and ZIP phishing, enabling stealthy remote access and ...

Serial-to-IP converters are affected by potentially serious vulnerabilities that can expose OT and healthcare systems to ...

The 9.1-CVSS vulnerability enables attackers to circumvent RCE protections in the de facto template engine for the Java ...

Autonomous SOC agents now shipping can rewrite firewall rules and modify IAM policies — outpacing the governance frameworks ...

An attacker purchased 30+ WordPress plugins on Flippa, planted backdoors that lay dormant for eight months, then activated ...

Artificial intelligence companies, Anthropic and OpenAI, are taking serious steps to address the growing risks associated ...

Google’s Pixel 10 won’t feel faster because of its modem rewrite, but that’s beside the point. By moving deeper into Rust, ...

OpenAI launches GPT-5.4-Cyber with binary reverse engineering for verified defenders, scaling access to thousands as it ...