Yubico warns of a search path vulnerability in YubiKey Manager, libfido2 and python-fido2. Updates fix the bugs.
CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...
Anthropic fixed a significant vulnerability in Claude Code's handling of memories, but experts caution that memory files will ...
Cybersecurity researchers have discovered a critical "by design" weakness in the Model Context Protocol's (MCP) architecture ...
Already, BAND's early users — and enterprises more broadly — are mixing and matching AI agents powered by models from various ...
A design flaw – or expected behavior based on a bad design choice, depending on who is telling the story – baked into ...
Learn prompt engineering with this practical cheat sheet covering frameworks, techniques, and tips to get more accurate and ...
Malicious npm packages have been identified distributing malware that steals credentials and attempts to spread across ...
Yet another npm supply-chain attack is worming its way through compromised packages, stealing secrets and sensitive data as ...
A team of researchers from UC Berkeley have demonstrated that eight AI agent benchmarks can be manipulated to produce ...
An unpatched vulnerability in Anthropic's Model Context Protocol creates a channel for attackers, forcing banks to manage the ...
Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...