Publicly released exploit code for an effectively unpatched vulnerability that gives root access to virtually all releases of ...

A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary ...

Exploit allows training completion to be recorded without course interaction, impacting OSHA, medical, legal, and other ...

The incident underscores rising risks at the intersection of artificial intelligence and automated financial systems, ...

Six teams exploited Claude Code, Copilot, Codex, and Vertex AI in nine months. Every attack hit runtime credentials that IAM ...

CVE-2026-0300 exploited after April 9 attempts enables PAN-OS RCE, leading to stealth espionage and lateral movement by April ...

The attack on the Trellix source code repository disclosed last week has been claimed by the RansomHouse threat group, which leaked a small set of images as proof of the intrusion. Yesterday, the ...

MetInfo CMS flaw CVE-2026-29014 exploited after April 7 patch, enabling remote code execution and targeting 2,000 instances.

In a blog post on Wednesday, Mohan Pedhapati (s1r1us), CTO of Hacktron, described how he used Opus 4.6 to create a full ...

With a hunch, and an hour of AI-assisted scanning, cybersecurity researchers identified and then figured out how to exploit a ...

Scallop lost 150K SUI in a Sui DeFi exploit targeting a deprecated rewards contract. The team will cover the full loss.

After the CopyFail vulnerability gave root access from any user on almost all distributions last week, this week we’ve got DirtyFrag. This chains the vulnerability in CopyFail (xfrm-ESP) and ...