CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...
Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.
A design flaw – or expected behavior based on a bad design choice, depending on who is telling the story – baked into ...
Top photo ID apps leak user data - over 150,000 thought to have been affected; Huge data leak of 149 million credentials ...
A design choice in the MCP SDKs allows remote code execution across the AI supply chain.
Anthropic introduces “repeatable routines” in Claude Code, bringing AI-powered automation and a redesigned workspace to ...
Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...
When you get past the playing around stage, you need a more powerful solution ...
How mature is your AI agent security? VentureBeat's survey of 108 enterprises maps the gap between monitoring and isolation — ...
Checkmarx, a security company offering tools for developers, has been compromised for a second time in a month. The hackers ...
Hackers are dodging Windows security tools by running secret Linux virtual machines with QEMU, an open-source virtualizer.
Anthropic’s Model Context Protocol, a fast-growing standard used to connect AI models with external tools and data, has come ...