CVE-2026-33626 exploited within 13 hours of disclosure, enabling SSRF-based cloud credential theft and internal scanning.

Anthropic fixed a significant vulnerability in Claude Code's handling of memories, but experts caution that memory files will ...

CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...

The CVSS‑9.3 vulnerability allows unauthenticated remote code execution on exposed Marimo servers and was exploited in the wild shortly after disclosure, Sysdig says.

As supply-chain attacks against widely-used, open-source software repositories continue, experts are urging developers to not ...

A critical pre-authentication remote code execution (RCE) vulnerability in Marimo is now under active exploitation, leveraged ...

Open WebUI has been getting some great updates, and it's a lot better than ChatGPT's web interface at this point.

The Chrome and Edge browsers have built-in APIs for language detection, translation, summarization, and more, using locally ...

Tencent Cloud's Cube Sandbox goes fully open source with five technical breakthroughs, providing a production-grade ...

Perplexity launches its “Personal Computer” AI assistant for Mac, enabling users to automate tasks across apps, files, and ...

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...

Malwarebytes warns that a fake Microsoft support site is distributing password-stealing malware through a spoofed Windows update installerThe Latest Tech News, Delivered to Your Inbox ...