A previously unknown threat group using tried-and-tested social engineering tactics - Microsoft Teams chat invitations and ...
CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...
An unpatched vulnerability in Anthropic's Model Context Protocol creates a channel for attackers, forcing banks to manage the ...
Last week, something alarming happened in the world of software — and almost nobody outside the tech industry noticed. A widely-used software library called LiteLLM, downloaded over 95 million times ...
A cybercrime group impersonates IT helpdesk staff on Microsoft Teams, deploying SNOW malware to steal credentials and ...
Cybercriminals are now leveraging Microsoft Teams, posing as IT helpdesk staff, to trick employees into revealing credentials ...
Progress has released patches for multiple remote code execution and OS command injection flaws in MOVEit WAF and LoadMaster.
The move would allow civilian agencies to access a modified version of Anthropic’s powerful vulnerability‑hunting AI, under ...
Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...
CVE-2026-34040 lets attackers bypass some Docker authentication plugins by allowing an empty request body. Present since 2024, this bug was caused by a previous fix to the auth workflow. In the ...