CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...

A design flaw – or expected behavior based on a bad design choice, depending on who is telling the story – baked into ...

A design choice in the MCP SDKs allows remote code execution across the AI supply chain.

Top photo ID apps leak user data - over 150,000 thought to have been affected; Huge data leak of 149 million credentials ...

Cloudflare expands Agent Cloud with OpenAI GPT-5.4 integration and isolate-based Dynamic Workers, challenging containers as ...

Anthropic introduces “repeatable routines” in Claude Code, bringing AI-powered automation and a redesigned workspace to ...

Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...

Open WebUI has been getting some great updates, and it's a lot better than ChatGPT's web interface at this point.

How mature is your AI agent security? VentureBeat's survey of 108 enterprises maps the gap between monitoring and isolation — ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added eight new vulnerabilities to its Known ...

Hackers are dodging Windows security tools by running secret Linux virtual machines with QEMU, an open-source virtualizer.

Anthropic’s Model Context Protocol, a fast-growing standard used to connect AI models with external tools and data, has come ...