The CVSS‑9.3 vulnerability allows unauthenticated remote code execution on exposed Marimo servers and was exploited in the wild shortly after disclosure, Sysdig says.

A critical pre-authentication remote code execution (RCE) vulnerability in Marimo is now under active exploitation, leveraged ...

A major global phishing network, W3LL, has been dismantled by the FBI and Indonesian authorities, preventing over $20 million in fraud. This sophisticated operation, which sold account credentials and ...

The IT security company NetKnights has released version 3.13 of its multi-factor authentication software, privacyIDEA ...

May the best programmer win!

Marimo CVE-2026-39987 exploited within 10 hours of disclosure, enabling unauthenticated RCE and credential theft, emphasizing urgent patching needs.

Polymarket migrates from USDC.e to PolymarketUSD, backed 1:1 by USDC, in a full exchange stack upgrade. Builders must update to the latest CLOB-Client SDK in TypeScript, Python, or Go and re-sign all ...

Anthropic’s Claude agents outperformed human researchers and produced “alien science,” raising new questions about AI ...

Open WebUI has been getting some great updates, and it's a lot better than ChatGPT's web interface at this point.

Anthropic is reportedly preparing Claude Opus 4.7 as it accelerates its AI release cycle, alongside new tools that could ...

Anthropic leaked 512,000 lines of Claude Code source via npm, its second security lapse in days as the $350B startup eyes a Q4 IPO.