Overview On April 15, NSFOCUS CERT detected that Microsoft released the April Security Update patch, fixing 165 security issues involving Windows, Microsoft Office, Microsoft SQL Server, Microsoft ...
Cybersecurity researchers have discovered a critical "by design" weakness in the Model Context Protocol's (MCP) architecture ...
CVE-2026-5752 CVSS 9.3 flaw in Terrarium enables root code execution via Pyodide prototype traversal, risking container ...
Progress has released patches for multiple remote code execution and OS command injection flaws in MOVEit WAF and LoadMaster.
The Ruby vulnerability is not easy to exploit, but allows an attacker to read sensitive data, start code, and install ...
The prompt-injection issue in the agentic AI product for filesystem operations was a sanitization issue that allowed for ...
A design choice in the MCP SDKs allows remote code execution across the AI supply chain.
Google Antigravity’s increasing popularity has brought the development platform into the crosshairs of researchers and ...
Mythos combined four separate low-severity bugs into a complete browser sandbox escape. Traditional scanners evaluate ...
Hackers are actively exploiting a critical vulnerability in the Breeze Cache plugin for WordPress that allows uploading ...
Remote terminal units, PLCs, PoS systems, and bedside patient monitors may be susceptible to remote code execution, ...
Researchers say a prompt injection bug in Google's Antigravity AI coding tool could have let attackers run commands, despite ...