Hackers are exploiting a critical, unpatched remote code execution (RCE) vulnerability in Fastjson without authentication.

OpenAI evaluated agents with reduced safeguards. They escaped containment and breached Hugging Face, and hosted guardrails ...

Hackers are actively exploiting a vulnerability in the FastJson open-source Java library, allowing remote code execution ...

AI models now can find and exploit zero-day vulnerabilities. While Java has a well-defined schedule for delivering JDK ...

Fastjson 1.x flaw CVE-2026-16723 can trigger unauthenticated RCE in Spring Boot fat-JAR apps, with attacks reported and no ...

A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs ...

We spoke with several cybersecurity researchers, who look for unknown vulnerabilities and develop tools to exploit them, ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Are AI browsers safe? A single web page can hijack an agent working inside your logged-in accounts. Here's how to limit what ...

OpenAI says an agent powered by its LLM models escaped its sandboxed testing environment to infiltrate Hugging Face’s servers ...

The Indonesian Ministry of Defense has officially finalized a contract to procure 12 advanced M-346 F Block 20 fighter ... Indonesia's National Narcotics Agency seized more than 12.3 tons of narcotics ...

Spring AI enterprise Java is now in production, but agent security is the next crisis: UberConf 2026 opens today in Denver ...