CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...
A design flaw – or expected behavior based on a bad design choice, depending on who is telling the story – baked into ...
Google launches AI agent suite at Cloud Next 2026 with Workspace Studio, A2A protocol at 150 orgs, and Project Mariner. The pitch: only Google owns the full stack.
A design choice in the MCP SDKs allows remote code execution across the AI supply chain.
How mature is your AI agent security? VentureBeat's survey of 108 enterprises maps the gap between monitoring and isolation — ...
Anthropic’s Model Context Protocol, a fast-growing standard used to connect AI models with external tools and data, has come ...
Hackers have compromised Docker images, VSCode and Open VSX extensions for the Checkmarx KICS analysis tool to harvest ...
ThreatsDay Bulletin: active exploits, supply chain attacks, AI abuse, and stealth data risks observed this week.
Joint solution closes the software supply chain trust gap with secure-by-default artifacts for engineering teams building ...
On Thursday, Anthropic’s chief rival, OpenAI, took a different approach. The company unveiled a new flagship A.I. model, ...