CVE-2026-61500 is a critical authentication bypass in Rejetto HTTP File Server, discovered by Anthropic Mythos AI and exploited within 24 hours of public disclosure by a China-linked actor targeting ...

IBM has disclosed 25 vulnerabilities affecting Langflow OSS, including two critical flaws that allow unauthenticated remote ...

iOS, iPadOS, and other operating systems affected, so patch now.

In the September 2026 periodic vulnerability analysis PSIRT report, 8 vulnerabilities were detected from the SBOM of the ...

The Apache Software Foundation released Apache HTTP Server 2.4.69 on October 1, 2026, addressing security flaws that could ...

The next AI security disaster may not start with your model — it may start with the low-code tool your team trusted to build it.

The Cybersecurity and Infrastructure Security Agency (CISA) has introduced a new framework aimed at improving the quality of Common Vulnerabilities and Exposures (CVE) data. This initiative is driven ...

Two newly disclosed vulnerabilities in the Zammad open-source helpdesk platform could let attackers achieve remote code ...

Malicious spreadsheets can make LibreOffice and OpenOffice run Java code with Java enabled; LibreOffice has fixed the flaw.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities ( KEV ) catalog, ...

The adoption of AI agents in millions of organizations is creating new opportunities for attackers to make them take malicious actions, such as exfiltrating database contents and sensitive business ...

Key Points Zero-day chain attack by autonomous AI agent: An AI agent that chained two Zammad vulnerabilities (CVE-2026-102489 ...