Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...

CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...

A newly discovered threat actor is using Microsoft Teams, AWS S3 buckets, and custom "Snow" malware in a multipronged ...

A design flaw – or expected behavior based on a bad design choice, depending on who is telling the story – baked into ...

A single unauthenticated connection gives attackers a full shell; credential theft observed in under three minutes on honeypot servers.

An unpatched vulnerability in Anthropic's Model Context Protocol creates a channel for attackers, forcing banks to manage the ...

Stop using bloated tools—these 5 tiny open-source apps quietly solve problems nobody else bothers to fix and do more with ...

Perplexity launches its “Personal Computer” AI assistant for Mac, enabling users to automate tasks across apps, files, and ...

Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.

Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...

UNC6692 relies on email bombing and social engineering to infect victims with Snow malware: Snowbelt, Snowglaze, and ...

Enterprises modernize legacy mainframe systems with AI agents, leveraging existing infrastructure while overcoming ...