Google fixed Rogue Agent, a Dialogflow CX Code Blocks flaw that could let one writable agent affect every chatbot in a Cloud ...

Zimperium found RedWing, a rented Android kit that steals banking logins, lifts one-time codes, and forwards calls to defeat ...

The issue affects GitHub Agentic Workflows setups that read public input, hold private repo access, and can post output ...

Writer patched WriteOut after Sand Security found sandbox previews could forward session cookies into attacker-controlled ...

Proofpoint says UNK_MassTraction exploited patched Roundcube flaws to target U.S. and Canadian university mail servers.

CVE-2026-11405 affects five Tenda firmware builds and can bypass password checks through an undocumented admin login path in ...

Talos details ARToken, a PhaaS panel tied to EvilTokens that supports device code phishing, BEC workflows, SharePoint theft, ...

Federal complaint says a Windows GDID tied Peter Stokes to a May 2025 jewelry retailer hack that stole 77GB and drew an $8M ...

AI agents, prompts, and MCP tools now shape software builds, forcing teams to track provenance beyond packages and generated ...

BeyondTrust fixed four RS and PRA flaws, including two pre-auth bugs that could bypass appliance access controls under ...

Januscape abuses KVM shadow MMU page reuse to panic x86 hosts, with Kim reporting a controlled full escape exploit behind the ...

CVE-2026-20896 lets reachable Gitea Docker containers trust spoofed X-WEBAUTH-USER headers when reverse proxy auth is enabled ...