Public exploits have been released for the critical "wp2shell" remote code execution vulnerabilities affecting WordPress Core ...

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

Context bomb cybersecurity research from Tracebit shows that a single hidden text string inside an AWS cloud decoy stopped ...

Intruder built an AI-powered "vulnerability vending machine" that combines code slicing with LLMs to automatically discover ...

GitHub Copilot security review launched in the desktop app July 14, giving all subscribers — Free tier included — AI-driven ...

Recent incidents show attackers moving beyond LLM-written phishing lures to using AI across attack chains. Security teams ...

Prompt injections, the malicious commands attackers embed into content to entice LLMs to follow them, have been attackers’ go ...

Awareness of all the ways prompt injection can be effected will help security teams spot a new generation of attacks.

Chatbots now place orders, code assistants push updates, and autonomous agents comb production databases while you sleep.

Synthetic database activity monitoring and SQL threat detection portfolio covering privileged DBA activity, sensitive table access, suspicious query patterns, alert triage, dashboards, and control ...

But no comprehensive scanner exists. Traditional MCP security workflow: check tool descriptions -> read JSON manually, hope you spot poisoning review source for exec() -> grep -r "exec\|eval\|spawn" ...

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your security tools look.