AI agent exploited Salesforce sites; 263 objects, 55 Apex methods exposed at one portal, leading to PII and file leaks.

CISA added CVE-2026-42271, a high-severity LiteLLM command injection flaw, to its KEV catalog after evidence of active ...

A flaw in Meta's AI-powered Instagram recovery tool allowed attackers to hijack accounts by redirecting password reset links, ...

University of Toronto researchers demonstrate how open-weight local LLMs can be used to autonomously exploit flaws and ...

ATGs are used in multiple critical sectors of industry, and many are still unsecured.

SAP has released fixes for 15 vulnerabilities as part of its June 2026 Security Patch package, including four ...

CISOs need to prepare for a vulnerability discovery onslaught, even as attackers will still have work to do to operationalize ...

Attackers are currently targeting websites created with the CMS Drupal. However, pages are only vulnerable if they use PostgreSQL.

The reported cyberattacks on CBSE’s re-evaluation portal have reignited questions about the security of India’s digital ...

Most organizations find out about security gaps the hard way. By the time a vulnerability surfaces, attackers have already ...

Welcome to Saturday Hashtag, a weekly place for broader context. Saturday Hashtag: #AIPoisonPill originally appeared on ...

Web systems are designed to be simple and reliable. Designing for the everyday person is the goal, but if you don’t consider the odd man out, they may encounter some problems. This is the everyday ...