Claude Code saves secrets in approved commands, exposing 2,539 credentials across 1,994 public GitHub repositories, Apiiro ...

WordPress sites can remain exposed to code execution while installing the fix for actively exploited CVE-2026-119977 through ...

Attackers are exploiting CVE-2026-123158 in OpenSSH, with root access confirmed on an Alpine Linux honeypot. OpenSSH 10.6p2 ...

Microsoft Store now offers Paint 11.2609.401.0 to fix CVE-2026-83844, an RCE flaw; Windows Update does not deliver the fix.

Researchers show how browser extensions can abuse Claude Dispatch to approve prompts and execute code through Claude Desktop.

Chainguard's Athena validated over a dozen flaws, mostly pre-auth RCEs, in one open source project during a six-hour Mythos run.

Chainalysis says an agentic cyberattack exposed all users' names, usernames, password hashes and live tokens, prompting service shutdowns.

CWPdoor replaces Control Web Panel's web server after root access, enabling command execution through requests hidden from access logs.

Two patched Barracuda Email Security Gateway flaws can be chained to execute root commands without authentication, watchTowr ...

OpenAI unveils GPT-6 Cyber, reporting 948 Linux privilege escalation exploits and 81 unknown Firefox flaws discovered with ...

OpenSSH 10.6p2 fixes a critical password bypass allowing access to key-only accounts on affected Alpine Linux servers using ...

A patched ChatGPT HTML preview flaw let crafted content bypass Lockdown Mode restrictions, enabling chat data exfiltration.