More than 40,000 WordPress sites using the Quiz and Survey Master plugin have been affected by a SQL injection vulnerability that allowed authenticated users to interfere with database queries.

Google Threat Intelligence Group (GTIG) has published a new report warning about AI model extraction/distillation attacks, in which private-sector firms and researchers use legitimate API access to ...

Economist warns coming financial crisis will make 2008 look like 'Sunday school picnic' Bill Belichick Hall of Fame snub sparks debate Japan’s Genius Offshore Fish Farm Harvests Millions of Fish A ...

Cowork, an AI agent released by Anthropic to assist with daily tasks, has been found to have a vulnerability that allows it to read and execute malicious prompts from files uploaded by users.

A new open-source and cross-platform tool called Tirith can detect homoglyph attacks over command-line environments by ...

Researchers discover Gemini AI prompt injection via Google Calendar invites Attackers could exfiltrate private meeting data with minimal user interaction Vulnerability has been mitigated, reducing ...

Clawdbot's MCP implementation has no mandatory authentication, allows prompt injection, and grants shell access by design. Monday's VentureBeat article documented these architectural flaws. By ...