Seven vulnerabilities have been patched with the latest OpenSSL updates, including a flaw that can allow an attacker to ...

Dubbed “GrafanaGhost,” the vulnerability could have let an attacker bypass both client-side protections and AI guardrails to send private data from a Grafana environment to an external server without ...

A data breach is a security incident where an unauthorized individual accesses sensitive information. When a breach happens, ...

Anthropic Says Its New AI Model Is So Good at Finding Security Risks, You Can't Use It ...

Overview On March 11, NSFOCUS CERT detected that Microsoft released the March Security Update patch, which fixed 83 security issues involving widely used products such as Windows, Microsoft Office, ...

A critical Adobe Acrobat zero-day has been exploited for months via malicious PDFs to steal data and potentially take over ...

Multiple vulnerabilities in the Orthanc DICOM server could be exploited to cause crashes, leak information, or execute ...

Security researcher demonstrates how attackers can hijack Anthropic’s file upload API to exfiltrate sensitive information, even with network restrictions enabled. A newly disclosed vulnerability in ...

Anthropic announced this week that its new model found security flaws in "every major operating system and web browser." Even ...

Authentication Failures (A07) show the largest gap in the dataset: a 48-percentage-point difference between leaders and the field. Leaders fix at nearly 60%, while the field sits at roughly 12%.

A severe Android intent‑redirection vulnerability in a widely deployed SDK exposed sensitive user data across millions of ...

A flaw in the EngageLab SDK exposed 50 million Android users, allowing malicious apps to exploit trusted permissions and ...