Open WebUI, an open-source, self-hosted web interface for interacting with local or remote AI language models, carried a high ...

Threat actors are exploiting a recently discovered command injection vulnerability that affects multiple D-Link DSL gateway ...

DryRun Security, the industry’s first AI-native, code security intelligence company, has completed its first year out of stealth with strong corporate momentum.

The flaw is tracked as CVE-2025-54957 and its existence came to light in October 2025 after it was discovered by Google ...

Anyone who owns an Android device that is still supported should ensure that the current patch level 2026-01-05 is installed.

Microsoft has pushed back against claims that multiple prompt injection and sandbox-related issues raised by a security ...

Critical n8n flaw CVE-2025-68668 allows authenticated users to run system commands via workflows; affects versions 1.0.0 to ...

Common vulnerabilities and exposures (CVEs) include all types of subversive entry-points discovered in programs, along with a ...

Currently, attackers are targeting a five-year-old vulnerability in Fortinet firewalls. The vulnerabilities in ColdFusion are ...

The memory leak security vulnerability allows unauthenticated attackers to extract passwords and tokens from MongoDB servers.

Nearly 3.5 million University of Phoenix students and staff were affected by a data breach involving Social Security numbers ...