If you are a CIO or CISO evaluating an agentic AI platform, ask the same questions you would ask about any enterprise ...

The prompt-injection issue in the agentic AI product for filesystem operations was a sanitization issue that allowed for ...

A design choice in the MCP SDKs allows remote code execution across the AI supply chain.

Threat actors are exploiting security flaws in TBK DVR and end‑of‑life (EoL) TP-Link Wi-Fi routers to deploy Mirai-botnet variants on compromised devices, according to findings from Fortinet ...

The 9.1-CVSS vulnerability enables attackers to circumvent RCE protections in the de facto template engine for the Java Spring ecosystem.

Microsoft assigned CVE-2026-21520, a CVSS 7.5 indirect prompt injection vulnerability, to Copilot Studio. Capsule Security discovered the flaw, coordinated disclosure with Microsoft, and the patch was ...

Abstract: Modern Java build tools (Maven, Gradle) automate dependency management but inadvertently propagate cross library vulnerabilities via third-party libraries (TPLs), affect ing 70.5% of ...

A critical vulnerability in the Ninja Forms File Uploads premium add-on for WordPress allows uploading arbitrary files without authentication, which can lead to remote code execution. Identified as ...

Hackers are exploiting a maximum-severity vulnerability, tracked as CVE-2025-59528, in the open-source platform Flowise for building custom LLM apps and agentic systems to execute arbitrary code. The ...

Threat actors are exploiting a maximum-severity security flaw in Flowise, an open-source artificial intelligence (AI) platform, according to new findings from VulnCheck. The vulnerability in question ...

This repo might get taken down — fork it and bookmark it while you can. On March 31st, 2026, Chaofan Shou discovered something Anthropic definitely didn't intend: the complete source code of Claude ...

Fortinet deployed an emergency patch for yet another zero-day vulnerability that has been exploited in the wild. On Saturday, Fortinet disclosed CVE-2026-35616, which it described as an improper ...