CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...

Yubico warns of a search path vulnerability in YubiKey Manager, libfido2 and python-fido2. Updates fix the bugs.

The cybersecurity company said the systemic vulnerability is baked into Anthropic's official MCP software development kit ...

A design flaw – or expected behavior based on a bad design choice, depending on who is telling the story – baked into ...

The open-source project maps directly to OWASP’s top 10 agentic AI threats, aiming to curb issues like prompt injection, ...

A team of researchers from UC Berkeley have demonstrated that eight AI agent benchmarks can be manipulated to produce ...

Cloudflare expands Agent Cloud with OpenAI GPT-5.4 integration and isolate-based Dynamic Workers, challenging containers as ...

An attacker purchased 30+ WordPress plugins on Flippa, planted backdoors that lay dormant for eight months, then activated ...

The new agent will enter public beta in the Firefly web app within weeks; anyone can join the waitlist now, and usage will draw from existing generative credit pools. Firefly's new controls add studio ...

Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...

Infosecurity outlines key recommendations for CISOs and security teams to implement safeguards for AI-assisted coding ...