In-the-wild exploitation seen for the new WP2Shell WordPress vulnerabilities, officially tracked as CVE-2026-60137 and ...

Discover how the Rogue Agent vulnerability in Google Dialogflow CX enabled persistent AI agent compromise, data exfiltration, ...

Researchers at the AI Now Institute developed a proof-of-concept exploit showing common AI tools used for security could ...

A newly-disclosed exploit in Claude Code’s ‘auto-mode’ leaves developers facing remote code execution (RCE) vulnerabilities ...

A popular artificial intelligence (AI) coding tool can be exploited in just two clicks, allowing attackers to install permission-rich model context protocol (MCP) servers on privileged developers' ...

As per the advisory, hackers working for the Russian Federal Security Service (FSB) Center 16 are constantly scanning for routers and other internet-connected devices that can be accessed with "common ...

The minimum penalty for being caught speeding on the UK's roads is a £100 fine.

GitHub Actions security enforcement went live today: actions/checkout now refuses by default to execute untrusted fork code ...

Cursor AI code editor faces unpatched vulnerability enabling code execution, adding to a string of critical RCE flaws ...

AWS Kiro prompt injection flaw let hidden web page text rewrite the IDE’s MCP configuration file and silently execute ...

The DuneSlide vulnerabilities enable zero-click prompt injection attacks that escape Cursor's sandbox and execute arbitrary code on the underlying operating system.

Researchers reported the flaw to Cursor in December, but it still remains in the popular AI coding platform and can be used ...