Two vulnerabilities in the secure mobile gateway appliance allow unauthenticated attackers to bypass authentication and ...

Researchers have uncovered a supply-chain attack that hides in Python packages, propagates like a worm, and tricks LLM-based ...

CISA added CVE-2026-42271, a high-severity LiteLLM command injection flaw, to its KEV catalog after evidence of active ...

An AI-driven worm using a local open-weight LLM autonomously exploited and replicated across 62% of a 33-host test network in ...

With over 2.2 billion installs, the flawed Python package offers attackers a huge blast radius, including silent access to ...

Agentic AI security dominated Infosecurity Europe 2026 as Toronto researchers proved a free open-weight AI worm can ...

The attacker tricked the Butter Network cross-chain bridge into minting millions more tokens than the legitimate supply of MAPO. MAPO, the native token of the Map Protocol, fell 96% on Wednesday after ...

Google’s Threat Intelligence Group (GTIG) reported the first confirmed instance of a zero-day exploit created with AI, targeting a two-factor authentication bypass in a widely used open-source system ...

A flaw in Hugging Face Transformers could allow malicious AI models to execute code, exposing credentials and highlighting AI ...

TL;DR Introduction At the start of this year, I wrote a blog on how 2025 was the ‘year of the infostealer’, and it doesn’t ...

Google on Wednesday published exploit code for an unfixed vulnerability in its Chromium browser codebase that threatens millions of people using Chrome, Microsoft Edge, and virtually all other ...

Explore how AI analytics is transforming sports and esports betting through predictive models, real-time data processing, and ...