ShadowMQ exposes how insecure code reuse can quietly spread dangerous vulnerabilities across the AI ecosystem. The post ShadowMQ: Critical AI Flaws...

New runC vulnerabilities allow potential container escapes and host takeover, putting Docker, Kubernetes, and cloud-native environments at risk. The...

New runC vulnerabilities allow potential container escapes and host takeover, putting Docker, Kubernetes, and cloud-native environments at risk. The...

GitLab has released urgent fixes for vulnerabilities that allow prompt injection and data exposure across its platform. The post Multiple GitLab...

GitLab has released urgent fixes for vulnerabilities that allow prompt injection and data exposure across its platform. The post Multiple GitLab...

A new Zoom Workplace flaw (CVE-2025-64740) lets attackers escalate privileges on Windows. The post Critical Zoom Vulnerability Exposes Windows Users...

CrowdStrike found that political trigger words can cause DeepSeek-R1 to generate insecure code, raising vulnerability rates by nearly 50%. The post...

A critical BeeStation OS flaw lets attackers run remote code on unpatched Synology devices. The post BeeStation RCE Zero-Day Puts Synology Devices at...

Hackers use AppleScript to disguise macOS malware as fake app updates, bypassing Apple’s protections. The post AppleScript Abused to Spread Fake...

EchoGram is a new attack that can silently flip AI guardrail decisions and bypass safety checks. The post EchoGram: The Attack That Can Break AI...