Researchers with Cyata and BlueRock uncovered vulnerabilities in MCP servers from Anthropic and Microsoft, feeding ongoing security worries about MCP and other agentic AI tools and their dual natures ...

Two high-severity vulnerabilities in Chainlit, a popular open-source framework for building conversational AI applications, ...

Researchers found the popular model context protocol (MCP) servers, which are integral components of AI services, carry ...

AI-generated code can introduce subtle security flaws when teams over-trust automated output. Intruder shows how an AI-written honeypot introduced hidden vulnerabilities that were exploited in attacks ...

Critical vuln flew under the radar for a decade A recently disclosed critical vulnerability in the GNU InetUtils telnet ...

Update Chainlit to the latest version ASAP Two "easy-to-exploit" vulnerabilities in the popular open-source AI framework ...

Familiar bugs in a popular open source framework for AI chatbots could give attackers dangerous powers in the cloud.

Web skimming campaigns use obfuscated JavaScript code to steal credit card data from checkout pages without detection by ...

A vulnerability in an ACF addon plugin exposes up to 100,000 installations to a complete site takeover by unauthenticated ...

The patched issues span core standard library components including archive/zip and net/http, as well as security-sensitive ...

Researchers found a LinkedIn phishing campaign delivering a remote access trojan via DLL sideloading, WinRAR SFX files, and ...

StackWarp is a hardware flaw affecting AMD Zen 1–5 CPUs that allows privileged hosts to execute code inside SEV-SNP ...