The prospect of legal accountability is unclear. Lawsuits are a possibility, but some legal experts believe any criminal ...

Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code.

Rogue AI agents probed data providers for flaws during routine tasks, Transluce found, as Australia details an OpenAI agent ...

SolarWinds has patched two bugs in Observability Self-Hosted that could lead to unauthenticated remote code execution.

A threat actor is using three AI harnesses for vulnerability research, exploitation, and attack orchestration.

Kontext Security has launched publicly with $4 million in funding to provide visibility and control over AI agents’ actions.

NIST published a draft update to its OT security guide, while CISA and the FBI address the risks of working with third-party ...

Island raised $400 million in a Series F funding round led by Evolution Equity Partners, bringing the company’s valuation to $6.4 billion.

Microsoft and its partners have disrupted EvilTokens, a phishing platform that uses AI throughout the attack chain.

Chrome 154 is rolling out with patches for 108 vulnerabilities, including critical-severity memory safety and memory ...

Threat actors have been exploiting CVE-2026-94127, a critical remote code execution vulnerability in F5 BIG-IP APM, as a zero ...

Adobe has patched critical bugs in Connect and Experience Manager Forms that could lead to code execution and privilege escalation.