The prospect of legal accountability is unclear. Lawsuits are a possibility, but some legal experts believe any criminal ...

Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code.

Rogue AI agents probed data providers for flaws during routine tasks, Transluce found, as Australia details an OpenAI agent ...

SolarWinds has patched two bugs in Observability Self-Hosted that could lead to unauthenticated remote code execution.

Kontext Security has launched publicly with $4 million in funding to provide visibility and control over AI agents’ actions.

A threat actor is using three AI harnesses for vulnerability research, exploitation, and attack orchestration.

NIST published a draft update to its OT security guide, while CISA and the FBI address the risks of working with third-party ...

Island raised $400 million in a Series F funding round led by Evolution Equity Partners, bringing the company’s valuation to $6.4 billion.

Check Point has patched CVE-2026-93616, a critical zero-day vulnerability in Management Server exploited in the wild.

Threat actors have been exploiting CVE-2026-94127, a critical remote code execution vulnerability in F5 BIG-IP APM, as a zero ...

Microsoft and its partners have disrupted EvilTokens, a phishing platform that uses AI throughout the attack chain.

Chrome 154 is rolling out with patches for 108 vulnerabilities, including critical-severity memory safety and memory ...