Trezor says 67,000 more U.S. customers had personal and order data exposed in a breach at shipping provider ShipMonk.

A critical vulnerability in a popular Model Context Protocol server shows that application-layer safety controls cannot ...

AI's RAG platform let attackers run arbitrary queries as PostgreSQL superuser - and the default config has auth turned off.

On 2, 2026, CISA added seven vulnerabilities to its Known Exploited Vulnerabilities catalog, and one of them sits inside an AI proxy a lot ...

Trezor's shipping partner ShipMonk exposed 67,000 more customers' personal data, pushing the total breach count to roughly 80 ...

Hackers have been exploiting a critical-severity vulnerability (CVE-2026-9586) in the enterprise VoIP telephony management solution Sangoma Switchvox.

As organizations deploy AI agents, they face increasingly complex security risks from automated, machine-speed threats, ...

ESET said on August 31 that the Russia-aligned UAC-0099 group embedded a safety-sensitive prompt as a comment in a malicious VBS script used against a target in Ukraine. The technique, dubbed ...

All-in-One WP Migration plugin vulnerability CVE-2026-19949 lets attackers plant hidden SQL payloads via WordPress trackbacks; the injected code fires the moment a site admin runs a routine backup, ...

The vulnerability, tracked as CVE-2026-19949, is a second-order SQL injection that impacts versions prior to 7.110.

WordPress backup plugin vulnerability CVE-2026-19949 in All-in-One WP Migration exposes 3.25 million unpatched sites to ...

Sangoma Switchvox faces an actively exploited critical flaw enabling unauthenticated remote command execution.