Proof-of-concept exploit code has been published for a critical remote code execution flaw in protobuf.js, a widely used ...

A prompt injection flaw in Google’s Antigravity IDE turns a file search tool into a remote code execution vector, bypassing ...

CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...

Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...

OpenClaw (formerly MoltBot) has become a major security liability, with SecurityScorecard reporting that over 28,000 systems ...

Antigravity Strict Mode bypass disclosed Jan 7, 2026, patched Feb 28, enables arbitrary code execution via fd -X flag.

The cloud-based Webex service has already been patched, but admins must replace an identity provider certificate in Webex ...

From uncovering decades-old vulnerabilities to autonomously building exploits, Anthropic's Mythos AI frontier model is ...

CERT-UA links the AgingFly credential-stealing campaign to phishing, browser theft, and modular remote access.

Google has introduced Deep Research and Deep Research Max, powered by Gemini 3.1 Pro, marking a step change in its autonomous ...

A new malware family named 'AgingFly' has been identified in attacks against local governments and hospitals that steal ...

Google unveiled Deep Research and Deep Research Max, new Gemini 3.1 Pro-powered AI agents that combine web search, ...