The 9.1-CVSS vulnerability enables attackers to circumvent RCE protections in the de facto template engine for the Java ...
The prompt-injection issue in the agentic AI product for filesystem operations was a sanitization issue that allowed for ...
A design flaw – or expected behavior based on a bad design choice, depending on who is telling the story – baked into ...
If you are a CIO or CISO evaluating an agentic AI platform, ask the same questions you would ask about any enterprise ...
A design choice in the MCP SDKs allows remote code execution across the AI supply chain.
This week, a "Raccoon"-linked actor hit help desks, Eurail exposed 308K users, Fortinet patched critical flaws, Pushpaganda ...
A prompt injection flaw in Google’s Antigravity IDE turns a file search tool into a remote code execution vector, bypassing ...
CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...
Microsoft assigned CVE-2026-21520 to a Copilot Studio prompt injection vulnerability and patched it in January — but in ...
SAP has released 19 new security notes on its April 2026 security patch day, including one that resolves a critical-severity ...
A prompt injection attack hit Claude Code, Gemini CLI, and Copilot simultaneously. Here's what all three system cards reveal ...