Ivanti, Fortinet, and SAP have released security patches addressing multiple critical vulnerabilities that could lead to arbitrary code execution and information disclosure.Fortinet…
The ShinyHunters extortion crew exploited an unpatched remote code execution vulnerability in Oracle PeopleSoft (CVE-2026-35273) to breach enterprise systems, primarily targeting universities.…
Cybersecurity researchers at Check Point have disclosed three now-patched security flaws in LangGraph, an open-source framework by LangChain for building stateful, multi-agent…
Splunk has released urgent security updates to address a critical vulnerability in Splunk Enterprise, tracked as CVE-2026-20253, with a CVSS score of…
A chain of three vulnerabilities in LiteLLM, a widely deployed open-source AI gateway, allows low-privilege users to escalate to full admin and…
A critical vulnerability in Citrix Netscaler exploited by INC ransomware affiliates for initial access.
F5 has released security updates to address two critical vulnerabilities in NGINX Open Source that could allow remote code execution. The flaws,…
A critical heap-based buffer overflow in NGINX Open Source and NGINX Plus allows remote unauthenticated attackers to execute code when proxying HTTP/2…
Microsoft researchers have disclosed a novel exploit chain named AutoJack that allows a single malicious web page to hijack an AI browsing…
AutoGen Studio versions 0.4.3.dev1 and 0.4.3.dev2 contain an unauthenticated MCP WebSocket route that allows command execution. The stable release 0.4.2.2 is not…