Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery (CSRF) vulnerability dubbed 'Click2Shell' that affects the platform's Core component ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting three Linux kernel ...

To demonstrate the access without reading any internal code, Hacktron says it took over an OpenAI employee’s account whose Codex integration was linked to OpenAI’s GitHub organization, then used it to ...

WeWorm, the recent WeChat security flaw is the latest addition to the growing list of zero-click attacks. We discuss the ...

Lt. Gen. Paul Stanton reveals AI has caused a tenfold rise in Pentagon cybersecurity vulnerabilities, exposing decades of ...

Researchers used AI to build WeWorm, a zero-click worm that could hijack WeChat accounts through calls and spread ...

Two separate security incidents have highlighted the growing risks of giving advanced AI systems access to tools, computer ...

AI could accelerate vulnerability discovery, shrinking the pool of exploits governments rely on while speeding up the race between attackers and defenders.

PaperCut flaws were exploited across 440 servers using hundreds of AI agents. Learn which versions are affected and what ...

OpenAI limits GPT-6 Astra to code review and patching after tests showed exploit development capabilities, including two zero-days.

China-linked UNC3569 exploited a Sogou Input Method flaw to deploy GRAYRABBIT; Tencent fixed the issue in version 16.3.0.3498 ...

BlueMoon exploit kit, shared by four China-linked spy groups in 12 days, chains Chrome and Windows zero-days to hand ...