The Shai-Hulud 2.0 supply chain attacks exposed a structural weakness in enterprise security: how organizations determine ...

Researchers reported the flaw to Cursor in December, but it still remains in the popular AI coding platform and can be used ...

Researchers say a Windows vulnerability in Cursor could automatically execute code when a GitHub repository is opened, ...

WordPress 6.9.5 and 7.0.2 patch wp2shell, a pre-auth core RCE that lets anonymous attackers run code on default installs, ...

HalluSquatting exploits AI coding assistants that hallucinate fake repository names, letting attackers register those names ...

Cursor IDE zero-day vulnerability: AI security firm Mindgard spent seven months trying to report a Windows code-execution ...

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

WASHINGTON—The Trump administration is blocking funding for a swath of public-health programs run by the Centers for Disease Control and Prevention, the latest flashpoint in a push by the White House ...

A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on OpenSSL ...