CISA added CVE-2026-42271, a high-severity LiteLLM command injection flaw, to its KEV catalog after evidence of active ...
AI agent exploited Salesforce sites; 263 objects, 55 Apex methods exposed at one portal, leading to PII and file leaks.
SAP has released fixes for 15 vulnerabilities as part of its June 2026 Security Patch package, including four ...
Ghost CMS SQL injection campaign has compromised 700+ websites — including Harvard University, Oxford University, and DuckDuckGo — using a CVSS 9.4 flaw to inject ClickFix malware lures that trick ...
University of Toronto researchers demonstrate how open-weight local LLMs can be used to autonomously exploit flaws and ...
ATGs are used in multiple critical sectors of industry, and many are still unsecured.
A flaw in Meta's AI-powered Instagram recovery tool allowed attackers to hijack accounts by redirecting password reset links, ...
Attackers are currently targeting websites created with the CMS Drupal. However, pages are only vulnerable if they use PostgreSQL.
India's software supply chain security challenge is deepening as AI expands the attack surface while many enterprises lack detection and protection tools.
The reported cyberattacks on CBSE’s re-evaluation portal have reignited questions about the security of India’s digital ...
Picture this: you paste a link into ChatGPT and ask for a summary. The model obliges, returning a clean, confident breakdown ...
US cyber authorities have added a critical Drupal Core SQL injection flaw to their exploited-vulnerabilities list after attacks began targeting unpatched websites using PostgreSQL databases, ...