Attackers exploited a critical Metabase vulnerability to breach Mathspace after the company failed to patch its self-hosted ...

AI's RAG platform let attackers run arbitrary queries as PostgreSQL superuser - and the default config has auth turned off.

ESET said on August 31 that the Russia-aligned UAC-0099 group embedded a safety-sensitive prompt as a comment in a malicious VBS script used against a target in Ukraine. The technique, dubbed ...

On Equinix unveiled Inference Exchange with Nvidia and Together AI, combining Nvidia enterprise architectures, Together AI's ...

Super-botnets and hijacked cloud servers drive new bandwidth and packet-rate records as international law-enforcement ...

Threat actors are actively attempting to exploit CVE-2026-9586, a critical unauthenticated SQL injection vulnerability in ...

GitHub's CodeQL 2.26.4 boosts security for GitHub Actions, improves Rust alerts, and extends support to Go 1.27. Key update for developers.

Anthropic disclosed in July that a review of 141,006 cybersecurity evaluation runs had uncovered three incidents, spanning six runs, in which Claude reached the open internet ...

Hackers are exploiting a critical Langflow flaw that lets unauthenticated attackers remotely execute Python code on vulnerable systems.

External data should be treated as hostile until it has been checked, constrained, and transformed for the specific place it will be used. That applies whether the data comes from a browser form, a ...

ServiceNow has patched three maximum-severity vulnerabilities, including two leading to remote code execution.

Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.