Slopsquatting, phantom squatting, and HalluSquatting all exploit the same late-binding attack pattern, where AI coding agents ...

Security researchers warn hackers are actively exploiting two patched WordPress Core vulnerabilities that could let attackers ...

Hackers are exploiting the "wp2shell" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress ...

A newly-disclosed exploit in Claude Code’s ‘auto-mode’ leaves developers facing remote code execution (RCE) vulnerabilities during third-party library reviews. The AI Now Institute disclosed a ...

Organizations are urged to patch after proof-of-concept code makes the Linux root escalation flaw easier to exploit. Technical details and proof-of-concept (PoC) code targeting a recent Linux kernel ...

Argo CD, a widely used tool for deploying software to Kubernetes, has an unpatched flaw in its repo-server component that lets an unauthenticated attacker run code, provided they can reach the ...

Researchers are offering fresh proof that AI coding agents have become a viable attack surface for threat actors seeking to steal credentials, manipulate data, and compromise development environments.

An unknown threat actor has been observed exploiting a recently disclosed maximum-severity security flaw in SimpleHelp to deliver two previously unreported malware families, TaskWeaver and Djinn ...

If your iPhone or iPad is not running the latest software update, two exploit kits are built to take advantage of that. The toolkits, tracked under the names “Coruna” and “DarkSword,” target Apple ...