Hackers are exploiting a critical vulnerability in Marimo reactive Python notebook to deploy a new variant of NKAbuse malware ...

The CVSS‑9.3 vulnerability allows unauthenticated remote code execution on exposed Marimo servers and was exploited in the wild shortly after disclosure, Sysdig says.

Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...

A critical pre-authentication remote code execution (RCE) vulnerability in Marimo is now under active exploitation, leveraged ...

Nine Mexican government agencies targeted by a single attacker with two AI tools.

Aethir said it halted a bridge exploit on its Ethereum-linked contracts, limiting losses to under $90,000 while tracing funds with exchanges and security partners.

A threat actor started exploiting CVE-2026-39987, an unauthenticated RCE vulnerability in Marimo, nine hours after public ...

Its Mythos Preview model, which can allegedly find and exploit critical zero-days, also comes with certain controls, the ...

A wave of crypto hacks and attacks followed the Drift exploit, hitting at least 12 entities, including Rhea Finance and Grinex, this week.

A critical Nginx UI vulnerability that allows attackers to take full control of servers has been exploited in the wild.

Shadow AI 2.0 isn’t a hypothetical future, it’s a predictable consequence of fast hardware, easy distribution, and developer ...

Claude Mythos represents a new generation of AI models that can conduct autonomous attacks more effectively than ever before.