A zero-click vulnerability in Claude Desktop Extensions has exposed over 10,000 users to remote code execution through ...

A zero-click flaw in Anthropic’s Claude Desktop Extensions allows attackers to trigger remote code execution via Google ...

Fortinet fixes critical FortiClientEMS SQL injection flaw (CVSS 9.1) enabling code execution; separate SSO bug actively ...

LayerX researchers uncover a flaw in Anthropic's Claude Desktop Extensions that could lead to a RCE vulnerability if exploited by a threat actor. The report adds to the growing list of AI security ...

BeyondTrust warned customers to patch a critical security flaw in its Remote Support (RS) and Privileged Remote Access (PRA) ...

Google released a Chrome security update fixing two high-severity flaws that could enable code execution or crashes via malicious websites.

A Chinese state-sponsored actor was seen exploiting a WinRAR bug, soon after the Russians.

Docker has released security fixes for a critical vulnerability affecting its AI-assisted feature known as Ask Gordon. The ...

In using AI to improve efficiency, developers are granting extensive permissions to download content from the web, and read, write, and delete files on their machines without requiring developer ...

China-linked Amaranth-Dragon and Mustang Panda target Southeast Asian governments using WinRAR exploit and PlugX phishing ...

Four security vulnerabilities have been found in the open source Ingress NGINX traffic controller that is extensively used by organizations in Kubernetes deployments. They can only be fixed by ...

Multiple critical vulnerabilities in the popular n8n open-source workflow automation platform allow escaping the confines of ...