Three vulnerabilities in Anthropic’s MCP Git server allow prompt injection attacks that can read or delete files and, in some cases, lead to RCE.

Researchers found a LinkedIn phishing campaign delivering a remote access trojan via DLL sideloading, WinRAR SFX files, and ...

Vulnerabilities in Chainlit could be exploited without user interaction to exfiltrate environment variables, credentials, ...

Update Chainlit to the latest version ASAP Two "easy-to-exploit" vulnerabilities in the popular open-source AI framework ...

Who knew binge-watching YouTube could count as robotics R&D? 1X has plugged a 14-billion-parameter 1X World Model (1XWM) into ...

Moxie Marlinspike, the mind behind the secure messaging app Signal, has launched an alternative to AI chatbot ChatGPT that focuses on user privacy and security. Also: The best free AI courses and ...

In a way, the engineering behind Confer is profoundly simple: the private key is kept with the user, so after the data is ...

TL;DR: Build real-world cybersecurity skills with The All-in-One Super-Sized Ethical Hacking Bundle for $35.99—lifetime ...

Despite a nationwide ban, Grok AI is still running in Indonesia and Malaysia, aided by domain name system (DNS) tweaks and ...

Varonis found a “Reprompt” attack that let a single link hijack Microsoft Copilot Personal sessions and exfiltrate data; Microsoft patched it in January 2026.

The Python-based information stealer SolyxImmortal uses legitimate APIs and libraries for stealthy data gathering and ...

A new self-propagating malware is on the loose and it's using WhatsApp. Acronis blows the whistle with all the details.