Google released a Chrome security update fixing two high-severity flaws that could enable code execution or crashes via malicious websites.

This week’s cybersecurity recap highlights key attacks, zero-days, and patches to keep you informed and secure.

Ivanti has patched CVE-2026-1281 and CVE-2026-1340, two Endpoint Manager Mobile (EPMM) flaws exploited as zero-days.

San Andreas has been broken and rebroken many times over the years across its multiple versions, and there's one specific ...

A JavaScript sandbox bug rated CVSS 9.9 enables attackers to bypass AST‑based protections, while a Python execution bypass ...

New research from Cyata reveals that flaws in the servers connecting LLMs to local data via Anthropic’s MCP can be exploited to achieve remote code execution and unauthorized file access. All three ...

Anthropic PBC’s official Git Model Context Protocol server has several security vulnerabilities that can lead to arbitrary file access and, in some scenarios, full remote code execution triggered ...

The Security extension is an open-source Gemini CLI extension, built to enhance your repository's security posture. The extension adds a new command to Gemini CLI that analyzes code changes to ...

Replit's new feature allows users to create publishable and monetizable mobile apps using only natural language prompts. As more vibe-coding products come online, some software companies could see one ...

The Indian government has issued a ‘critical’ warning for Android smartphone users urging them to update their devices. The vulnerability note CIVN–20.