An unpatched SQL injection vulnerability in the Ghost content management system has been weaponized in an active, large-scale cyberattack that has compromised more than 700 websites worldwide — ...

CISA added CVE-2026-42271, a high-severity LiteLLM command injection flaw, to its KEV catalog after evidence of active ...

AI agent exploited Salesforce sites; 263 objects, 55 Apex methods exposed at one portal, leading to PII and file leaks.

SAP has released fixes for 15 vulnerabilities as part of its June 2026 Security Patch package, including four ...

CISOs need to prepare for a vulnerability discovery onslaught, even as attackers will still have work to do to operationalize ...

University of Toronto researchers demonstrate how open-weight local LLMs can be used to autonomously exploit flaws and ...

A flaw in Meta's AI-powered Instagram recovery tool allowed attackers to hijack accounts by redirecting password reset links, ...

ATGs are used in multiple critical sectors of industry, and many are still unsecured.

Drupal developers are warning of attacks on websites created with the Content Management System (CMS). Subsequently, attackers gain access to actually isolated data. However, they can also gain higher ...

India's software supply chain security challenge is deepening as AI expands the attack surface while many enterprises lack detection and protection tools.