Open WebUI, an open-source, self-hosted web interface for interacting with local or remote AI language models, carried a high ...

Critical n8n flaw CVE-2025-68668 allows authenticated users to run system commands via workflows; affects versions 1.0.0 to ...

Business-grade email server software SmarterMail just patched a maximum-severity vulnerability that allowed threat actors to ...

AI coding agents are highly vulnerable to zero-click attacks hidden in simple prompts on websites and repositories, a ...

The explosive, easy-to-trigger vulnerability was exploited within hours of disclosure, exposing the risks of default ...

SafeBreach researchers developed a zero-click PoC exploit that crashes unpatched Windows Servers using the Windows ...

MongoDB has warned IT admins to immediately patch a high-severity memory-read vulnerability that may be exploited by ...

Cybercriminals and state-sponsored hackers are increasingly exploiting Microsoft’s legitimate OAuth 2.0 device authorization process to hijack enterprise accounts, bypassing multifactor authentication ...

In early December 2025, the React core team disclosed two new vulnerabilities affecting React Server Components (RSC). These issues – Denial-of-Service and Source Code Exposure were found by security ...

A convicted murderer who was scheduled to be executed in Georgia this week had his date with death suspended after the state announced Monday that it was considering a new clemency application. Stacey ...

The Florida Supreme Court on Thursday refused to halt next week's scheduled execution of Frank Walls, turning down arguments that he should be spared because he is intellectually disabled and was 19 ...

Enterprises relying on Gladinet’s file-sharing services are faced with another round of zero-day patching, this time to block attackers from abusing cryptographic keys directly baked into its ...