CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...

Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...

A design flaw – or expected behavior based on a bad design choice, depending on who is telling the story – baked into ...

UNC6692 relies on email bombing and social engineering to infect victims with Snow malware: Snowbelt, Snowglaze, and ...

Enterprises modernize legacy mainframe systems with AI agents, leveraging existing infrastructure while overcoming ...

OpenAI Agents SDK update adds sandbox execution and a new harness to help developers build reliable, production-ready AI ...

Perplexity launches its “Personal Computer” AI assistant for Mac, enabling users to automate tasks across apps, files, and ...

UNC6692 has been attributed to a large email campaign that's designed to overwhelm a target's inbox with a flood of spam ...

An unpatched vulnerability in Anthropic's Model Context Protocol creates a channel for attackers, forcing banks to manage the ...

A newly discovered threat actor is using Microsoft Teams, AWS S3 buckets, and custom "Snow" malware in a multipronged ...

A routine software update for Anthropic's Claude Code tool accidentally leaked its entire source code, sparking rapid community response. Within hours, a developer rewrote the tool in Python and then ...