CISA added CVE-2026-42271, a high-severity LiteLLM command injection flaw, to its KEV catalog after evidence of active ...

AI agent exploited Salesforce sites; 263 objects, 55 Apex methods exposed at one portal, leading to PII and file leaks.

SAP has released fixes for 15 vulnerabilities as part of its June 2026 Security Patch package, including four ...

University of Toronto researchers demonstrate how open-weight local LLMs can be used to autonomously exploit flaws and ...

CISOs need to prepare for a vulnerability discovery onslaught, even as attackers will still have work to do to operationalize ...

The reported cyberattacks on CBSE’s re-evaluation portal have reignited questions about the security of India’s digital ...

A new benchmark study found AI agents remain vulnerable to prompt injection attacks as companies increasingly roll out the ...

Web systems are designed to be simple and reliable. Designing for the everyday person is the goal, but if you don’t consider the odd man out, they may encounter some problems. This is the everyday ...

CVE-2026-10520, a critical-severity vulnerability in Ivanti Sentry, was flagged as exploited based on activity observed on ...

Researchers have uncovered a supply-chain attack that hides in Python packages, propagates like a worm, and tricks LLM-based ...

Microsoft has patched an actively exploited Exchange Server vulnerability that allows threat actors to execute arbitrary ...

As threat actors operationalize AI to accelerate attacks, they are also leveraging the wider global interest around AI itself ...