Open-source Android AI agents can turn hidden screen text into host commands, and all five tested frameworks failed at least ...

Google says Gemini 3.5 Flash Cyber found 55 confirmed V8 issues and will enter a limited CodeMender pilot for governments and ...

AWS fixed a Kiro prompt injection chain that rewrote mcp.json and launched attacker-controlled code with developer privileges ...

Attackers exploit PAN-OS CVE-2026-0257 to deploy Qilin ransomware, with intrusions ranging from rapid encryption to data ...

Claude Mythos turns a Firefox patch into a working exploit within an hour, collapsing an N-day window once measured in weeks.

Attackers are exploiting two WordPress flaws as wp2shell, chaining them for unauthenticated RCE and deploying web shells and ...

Bit2Watt uses ordinary cloud GPU workloads to modulate power, with worst-case simulations showing grid instability across ...

Towr reports active exploitation of SharePoint CVE-2026-50522 after a public PoC, with attackers stealing machine keys for ...

JADEPUFFER exploits Langflow CVE-2025-3248 to deploy ENCFORGE ransomware against AI model weights, vector indexes, and ...

Zimbra 10.1.20 fixes nine flaws, including SNMP command injection and CVE-2026-50055, which could enable email exfiltration.

Attackers exploit CVE-2026-6875 in ServiceNow AI Platform, a pre-auth sandbox escape that could compromise instances and ...

Russian intelligence hijacks exposed cameras to track military routes as Censys flags 87,000 devices matching known-exploited ...