CVE-2026-42530, the NGINX HTTP/3 vulnerability rated CVSS 9.2, is collecting dismissals because exploitation requires ASLR to ...

Attackers are exploiting CVE-2026-4020 in Gravity SMTP to leak API keys, OAuth tokens, and system data from WordPress sites.

A new framework called SkillWeaver tackles AI agent tool routing by skipping full-library loading, cutting token use 99% on ...

Wordfence has blocked 17M+ exploit attempts targeting a Gravity SMTP bug that leaks API keys, OAuth tokens, and full system reports without authentication.

Gravity SMTP WordPress vulnerability CVE-2026-4020 has drawn 17 million automated exploit attempts since May 2026, draining ...

Security researchers identified a coordinated malware campaign within the JetBrains Marketplace designed to exfiltrate developer API keys.

At least 15 plug-ins for JetBrains IDEs transmit API keys to an external server, while otherwise offering their promised ...

OpenAI recently unveiled an ambitious new initiative designed to address one of the digital world's most pressing security ...

ESET researchers assisted in the global disruption of the Amadey botnet and Stealc infostealer, providing technical analysis, ...

The next generation of the Model Context Protocol (MCP) enables enterprise-scale AI deployments but shifts critical security ...

Akamai today revealed a raft of cybersecurity weaknesses in the latest specification for the Model Context Protocol (MCP) ...