The Coruna iOS exploit kit now ships with a DarkSword iOS 18 chain on 608 domains. zLabs breaks down its delivery, native ...
Anthropic says Claude chained software flaws into working exploits, highlighting the growing role of AI in vulnerability ...
A newly disclosed Microsoft Edge exploit chain combines logic vulnerabilities and Windows functionality to escape the browser ...
Orange Tsai built a complete Microsoft Edge exploit chain using only logic bugs—no memory corruption, no AI—to win the Pwnie ...
PHP is a programming language tailored for web development, and it now supports nearly 70 percent of the world’s websites. We ...
An unreleased Anthropic AI model found and chained security flaws in Chrome, Safari, Android, Windows, and Linux into working ...
Oren Yomtov of Accomplish showed two ways out of the OpenAI Codex sandbox, one from read-only mode. OpenAI fixed both within eight days.
Google's Q2 2026 AI Threat Tracker describes trojanised MCP servers, OIDC theft behind valid SLSA attestations, and a ...
An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.
Multiple tech companies and projects have recently pushed patches for a vulnerability called "HTTP2Shell" which could enable remote code execution (RCE) attacks, similar to the recent "PHP2Shell" ...
Microsoft issues critical out-of-band .NET security patch after confirming impact of Google Brotli algorithm vulnerability, ...
Mikyo King, who leads the open source group at Arize AI, argues that AI agents should stop being handed enormous catalogs of tools and instead ...