Artificial intelligence company OpenAI has confirmed that the mystery attacker behind last week's Hugging Face breach was two ...

Chrome Firefox security update July 2026 delivered emergency patches across five vendors on July 15: Mozilla confirmed public ...

Zimbra zero-click vulnerability CVE-2025-66376 is being actively exploited by Russian hackers targeting NATO governments and defense contractors. Unit 42 and CISA warn that Void Blizzard has raided ...

Capital One has open-sourced VulnHunter, an AI security tool that finds exploitable code flaws, maps attack paths and helps ...

A researcher who discovered a critical vulnerability in WordPress has used OpenAI’s latest model to develop an exploit chain ...

OpenAI said the systems had their cyber guardrails lowered for an internal benchmark, but the incident shows how autonomous ...

Hackers are exploiting the "wp2shell" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress ...

Attackers have begun widely exploiting two critical vulnerabilities in WordPress that, when chained, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites.

Threat intelligence firm Defused confirmed over the weekend that attackers are actively exploiting a critical vulnerability in ServiceNow's AI Platform — and that the exploit landscape is already ...

In-the-wild exploitation seen for the new WP2Shell WordPress vulnerabilities, officially tracked as CVE-2026-60137 and ...

OpenAI says an agent powered by its LLM models escaped its sandboxed testing environment to infiltrate Hugging Face’s servers ...

A large-scale operation dubbed 'FakeGit' is pushing SmartLoader and StealC malware through 7,600 malicious GitHub ...