Month: August 2026

The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched…

A massive set of 737 free VPN and proxy extensions have been found to mainly target Russian-speaking users seeking access…

A newly disclosed flaw in the way OpenAI, Anthropic, and Google carried hidden AI reasoning between API calls let researchers…

Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Classic that, if successfully exploited,…

Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new…

Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of harvesting cloud…

SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in…

Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in…

AI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabilities, manage…

Attacker-controlled instructions can make Atlassian’s Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send…