A North Korean APT has crafted malicious software packages to appeal to AI coding agents, while ‘slopsquatting’ shows the ...

Four npm packages linked to SAP's Cloud Application Programming Model were hijacked. The hackers added code that steals ...

Qualys ANZ managing director Sam Salehi joins the Cyber Uncut podcast to expose the expanding AI attack surface, the ...

CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...

AI agents are now being weaponized through prompt injection, exposing why model guardrails are not enough to protect ...

Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...

A new disclosed cPanel flaw tracked as CVE-2026-41940 is being mass-exploited to breach websites and encrypt data in "Sorry" ...

Installing an extension takes seconds, but the access it gains can persist for months or years across every site and session ...

A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary ...

Anthropic builds powerful AI models, but the company's fear tactics, security incidents and service outages should make ...

A security researcher’s decompilation of the White House’s official mobile app uncovered hidden GPS tracking, insecure code practices, and risky third‑party dependencies. The app transmits location ...