Russia's Sandworm hacking group is using fake CAPTCHA prompts to infect Ukrainian devices with malware across ten-plus ...

CVE-2026-42533 NGINX vulnerability now has a public config scanner as researcher Stan Shaw warns the critical heap buffer ...

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...

Cybersecurity researchers at Microsoft have uncovered a sophisticated piece of malware that spreads through USB drives, intercepts cryptocurrency wallet ...

A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at Obsidian Security disclosed LiteLLM is a widely ...

Spend enough time in the self-hosting and smart home hobby, and even the most ardent smart home enthusiast eventually reaches a moment where the excitement of adding new gadgets gives way to the ...

一个仅需“1 个字符”即可触发的漏洞，正在威胁大量 AI Agent 与 MCP基础设施。 过去几年，AI 圈一直在疯狂讨论“大模型能力边界”。 但很多人忽略了一件事：真正危险的，未必是模型本身，而是那些把模型连接到真实世界的基础设施。当 AI Agent 开始接管邮箱 ...

Researchers who found the bug warn that its Moderate rating understates a threat reaching across LLM gateways, MCP servers and agent infrastructure. A single malformed character in a web request can ...

Data Engineer and technical writer at The Data Prism. Writing about data pipelines, AI integration, and backend systems. A friend of mine works at a software company. Someone asked the company’s AI ...