Two malware campaigns weaponize open-source software to target executives and cloud systems, combining social engineering ...

Handing your computing tasks over to a cute AI crustacean might be intriguing - but you should consider these security risks before doing so.

On Jan 14, 2026, Fortinet published updates to fix a critical vulnerability in FortiSIEM that could allow unauthenticated attackers to execute code on vulnerable appliances, affecting Super and Worker ...

A command injection vulnerability in Array Networks AG Series secure access gateways has been exploited in the wild since August 2025, according to an alert issued by JPCERT/CC this week. The ...

Researchers at Koi Security have found that three of Anthropic’s official extensions for Claude Desktop were vulnerable to prompt injection. The vulnerabilities, reported through Anthropic's HackerOne ...

A critical security weakness was discovered and patched in the popular @react-native-community/cli package, which supports developers building React Native mobile apps. The vulnerability could let ...

TP-Link is warning of two command injection vulnerabilities in Omada gateway devices that could be exploited to execute arbitrary OS commands. Omada gateways are marketed as full-stack solutions ...

Four newly discovered vulnerabilities in the fault simulation platform can lead to OS command injection and cluster takeover, even from unprivileged pods. Researchers have found critical ...

The Cybersecurity and Infrastructure Security Agency (CISA) added two N-able vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog this week, but, thankfully, a fix is available now.

There are moments in life that feel simultaneously surreal, understandable and poetic all in one. Today is one of those days as we mourn the loss of John Michael "Ozzy" Osbourne, one of the most ...

Hundreds of Model Context Protocol (MCP) servers used to link LLMs to third-party services, data sources, and tools include default configurations that could expose users to unauthorized OS command ...