The 9.1-CVSS vulnerability enables attackers to circumvent RCE protections in the de facto template engine for the Java ...

The prompt-injection issue in the agentic AI product for filesystem operations was a sanitization issue that allowed for ...

Nonprofit security organization Shadowserver found that over 6,400 Apache ActiveMQ servers exposed online are vulnerable to ...

Cybersecurity researchers have discovered a critical "by design" weakness in the Model Context Protocol's (MCP) architecture ...

A design choice in the MCP SDKs allows remote code execution across the AI supply chain.

CISA warned that attackers are now exploiting a high-severity Apache ActiveMQ vulnerability, which was patched earlier this ...

A design flaw – or expected behavior based on a bad design choice, depending on who is telling the story – baked into ...

Google launches AI agent suite at Cloud Next 2026 with Workspace Studio, A2A protocol at 150 orgs, and Project Mariner. The pitch: only Google owns the full stack.

South African township-focused Internet provider Fibertime has passed 400,000 households with its fibre-to-the-home (FTTH) ...

Anthropic’s Model Context Protocol, a fast-growing standard used to connect AI models with external tools and data, has come ...

Cybercriminals are tricking AI into leaking your data, executing code, and sending you to malicious sites. Here's how.

A prompt injection flaw in Google’s Antigravity IDE turns a file search tool into a remote code execution vector, bypassing ...