The Coruna iOS exploit kit now ships with a DarkSword iOS 18 chain on 608 domains. zLabs breaks down its delivery, native ...

Even though I checked, the secret outside was opened.I ask the AI, 'You may only touch things inside this folder.' For those ...

Microsoft issues critical out-of-band .NET security patch after confirming impact of Google Brotli algorithm vulnerability, ...

From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to ...

A critical remote code execution flaw in OpenCode has been patched. The standard defender toolchain cannot see that. Anomaly, ...

IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by Node.js and other software. The vulnerability is ...

How OpenAI's AI agents escaped an eval sandbox, built a secret message board, and hacked Hugging Face, plus 8 lessons for ...

CVE-2026-65105 is 8.1 High, patched 25 August 2026. Oasis Security showed one webpage could rewrite a NemoClaw model's chat ...

We're a long way from Kali Linux here, Toto. Grayware - software that behaves like malware without being technically malicious - is now blocked by default across Chainguard’s stack. There's a lot to ...

Critical RCE flaws, millions of exploit attempts, rogue AI agents, supply chain attacks, leaked keys, and more.

AI may generate the code, but accountability for its security, quality, compliance, and production impact stays with the ...

A series of major cybersecurity incidents, from critical PHP and Node.js vulnerabilities to malware infiltrating LiteLLM, has ...