CVE-2026-12957 in Amazon Q is the third MCP auto-execution vulnerability in three AI coding tools. The pattern reveals a ...
A malicious Chromium-based extension that spoofs the AI-powered answer engine Perplexity AI redirects browser search traffic using MV3 APIs and intermediary infrastructure.
Post-quantum cryptography migration just got its first enforceable federal deadline. EO 14409 requires U.S. agencies to ...
ESET researchers assisted in the global disruption of the Amadey botnet and Stealc infostealer, providing technical analysis, ...
On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that ...
Wordfence has blocked 17M+ exploit attempts targeting a Gravity SMTP bug that leaks API keys, OAuth tokens, and full system reports without authentication.
A new Mini Shai-Hulud supply chain attack campaign, codenamed Miasma, has compromised @redhat-cloud-services packages to steal credentials and secrets from developer machines and deliver a ...
The North Korean threat actors behind the Contagious Interview campaign, also tracked as WaterPlum, have been attributed to a malware family tracked as StoatWaffle that's distributed via malicious ...
NIST Post-Quantum Cryptography Project crypto: post-quantum support roadmap Key Encapsulation ML-KEM Internet X.509 Public Key Infrastructure - Algorithm Identifiers for the Module-Lattice-Based ...
A suspicious Visual Studio Code extension with file-encrypting and data-stealing behavior successfully bypassed marketplace review and entered the developer ecosystem. In a suspected test effort, ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results