CVE-2026-59726 (CVSS 10.0) in Ruflo exposed 233 MCP tools without authentication. The novel vector: attackers can poison the AgentDB learning store, and a software patch alone doesn't remove the ...

Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals ...

Google has added a control layer to the managed agents in its Gemini API, letting developers run their own code before and ...

Pakistan’s National CERT has warned of critical WordPress flaws that could let hackers take control of websites and urged ...

Pakistan’s National Cyber Emergency Response Team (National CERT) has issued a high-severity cybersecurity advisory, warning ...

WordPress 6.9.5 and 7.0.2 fix wp2shell, a core REST API bug chaining route confusion and SQL injection into unauthenticated ...

An IDOR flaw in the Pope official prayer app data leak exposed the names, plaintext emails, and admin roles of over 700,000 ...

Poolside’s Laguna S 2.1 is a new Western open-weight coding AI model that rivals larger systems on benchmarks with ...

Fulfillment complexity often enters through system boundaries. An order begins in an ecommerce platform, moves into warehouse ...

The flaw affects WordPress Core’s REST Batch API, allowing unauthenticated attackers to execute code on vulnerable sites.

An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable. Every 6.9 and 7.0 site was in range until Friday, when WordPress ...

AI agent payments gained open governance July 14, 2026: the Linux Foundation launched the x402 Foundation with 40 members including Visa, Mastercard, Stripe, and AWS to steward an HTTP protocol for ...