Hackers hide Agent Tesla malware in Unicode emojis inside fake bank emails, tricking finance teams into opening malicious ...

The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process. A critical-severity type ...

The type confusion vulnerability allows a guest-to-host sandbox escape which can lead to remote code execution ...

Isolated-vm's ExternalCopy type confusion lets sandboxed code corrupt host memory and potentially reach host RCE; fixes are ...

A newly disclosed critical vulnerabilities across several open-source SAML implementations through an AI-assisted research pipeline using Anthropic’s Claude Opus.

Chrome security update 151.0.7922.169/.170 patches 15 vulnerabilities, including two Critical sandbox-escape buffer overflows ...

Google has released a Chrome desktop update fixing 15 security vulnerabilities, including 2 buffer overflow flaws rated ...

Cursor launched Origin, a new AI-native code hosting platform, as a major GitHub outage exposed growing risks for engineering teams and intensified the battle over code repositories, AI agents, and ...

A weekly look at exploited flaws, exposed systems, supply-chain attacks, browser abuse, malware campaigns, and the security risks that mattered most.

New research exposes the mechanics behind ChatGPT citations, including what gets retrieved, what gets read, and what ...