Right on the heels of Microsoft releasing a record number of security patches, a researcher has published exploit code that ...

ServiceNow CVE-2026-6875, a critical unauthenticated RCE in the AI Platform, is under active exploitation. Threat ...

Security firm Group-IB has uncovered ClickLock Stealer, a new Mac threat that hijacks normal system behavior to pressure ...

Attackers have begun widely exploiting two critical vulnerabilities in WordPress that, when chained, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites.

A cybersecurity researcher revealed this week that Anthropic's Claude artificial intelligence assisted him in discovering a ...

Intruder built an AI-powered "vulnerability vending machine" that combines code slicing with LLMs to automatically discover ...

Google-owned Mandiant published a complete forensic reconstruction today of a sophisticated intrusion campaign that used a single maliciously crafted CSV file to achieve root-level control over Cisco ...

A researcher found that using Anthropic’s Claude Opus 4.7, he could break into the website of Front Gate—used by every festival from Lollapalooza to Bonnaroo—and freely issue any ticket he chose.

AI agents inherit long-lived secrets and standing privilege, turning old identity gaps into machine-speed risk across ...

AI speeds offensive testing, but unproven findings increase triage noise unless teams verify reachability, impact, and ...

The popular product lifecycle management platform is under active exploitation for an RCE vulnerability that could put intellectual property in jeopardy. Hackers are exploiting a critical ...

JadePuffer, a ransomware operation, used an AI agent to carry out much of the intrusion chain from reconnaissance, key theft, ...