Zoom patches two Workplace for Windows flaws that could let unauthenticated remote attackers escalate privileges, including a ...

AntiFox-linked intrusions used IIS web shells and valid AWS credentials to enumerate cloud services and access production ...

Attackers targeted Qlik Sense servers with blocked PowerShell reverse shell attempts, using infrastructure hosting backdoors and exploits.

Researchers found 35,578 Grok-built apps accessible without sign-in, exposing internal data from X, SpaceXSI, and 30 other organizations.

Token shows how AI browser agents inherit user privileges, obscuring agent identity and task scope, and outlines ways to ...

Mudhra revoked 8 more certificate authorities after finding its Python script exposed RSA private keys to process memory during an HSM transfer.

Microsoft patches 1,259 flaws, including an actively exploited Outlook vulnerability that could expose NTLMv2 hashes through crafted files.

Railway says stolen AI API keys caused $740,000 in unauthorized charges after attackers decrypted secrets in up to 100,000 workspaces.

Microsoft demonstrates how editing as few as six AI model neurons can plant backdoors that trigger command execution by agents.

CISA adds exploited Cisco BroadWorks and Openwave flaws to its KEV catalog, requiring federal agencies to patch by November 24, 2026.

An iOS sandbox escape published on GitHub lets an app read other apps' files on iPhones running iOS 26 and 27. That puts seed phrases, private keys, and login credentials at risk of exposure to ...

Hackers are exploiting a critical Xen Orchestra authentication bypass that can grant admin access and lead to XCP-ng node ...