A critical vulnerability affecting certain configurations of the Exim open-source mail transfer agent could be exploited by ...

Fortinet has released security patches for two critical vulnerabilities in FortiSandbox and FortiAuthenticator that could ...

New research exposes how prompt injection in AI agent frameworks can lead to remote code execution. Learn how these ...

Admins with Dynamics 365 on-prem should also take note of a “severe” vulnerability that allows remote code execution.

One of the most severe vulnerabilities patched by Redmond is CVE-2026-41096 (CVSS score: 9.8), a heap-based buffer overflow ...

SAP has released 15 new security notes, including two addressing critical code injection flaws in S/4HANA and Commerce.

This month's Patch Tuesday addressed 120 vulnerabilities across Windows, Office, and cloud services, including critical ...

Cisco has released patches for several high-severity vulnerabilities that could lead to code execution, SSRF attacks, and DoS ...

Critical out-of-bounds read in Ollama before 0.17.1 leaks process memory including API keys from over 300000 servers via ...

A vulnerability in Apache HTTP Server’s HTTP/2 protocol handling now has working exploit code circulating among security ...

Hugging Face hosts 352,000 unsafe model issues. ClawHub's registry contains 341 malicious AI agent skills. The AI supply chain is now the most attractive target in software security.

It's the first time in two years with no zero-days. But with 137 flaws to patch, including nine critical ones, admins still ...