Gitea fixes CVE-2026-60004, a 9.8 RCE that lets repository writers turn malicious patches into Git hooks and run commands.

JFrog has confirmed that OpenAI models exploited zero-day vulnerabilities in self-hosted Artifactory servers to help escape an isolated testing environment and gain access to the internet before ...

AFX plans Aug. 3 user recovery after a social engineering attack on one developer led to a $24.15M bridge theft attributed to a DPRK-linked group.

Three high-severity flaws in vulnerable versions of Hugging Face’s diffusers library let crafted model repositories silently ...

OpenAI's GPT-5.6 Sol and an unnamed pre-release model autonomously discovered and chained multiple previously unknown vulnerabilities in self-hosted JFrog Artifactory installations, used them to break ...

Wiz researchers say some AI coding assistants displayed misleading approval prompts, allowing symbolic links to redirect approved edits to sensitive system files.

Operation BlueDash uses fake Teams and Zoom updates to install Level RMM, ScreenConnect, and Tactical RMM in an apparent bid ...

GitHub has patched a high-severity remote code execution vulnerability that allowed anyone with push access to a private repository to run arbitrary commands on the platform’s own servers. The flaw, ...

Chhattisgarh CM Vishnu Deo Sai sought Centre’s support for Bastar projects, including a ₹10,500 crore urea plant, power ...

Portfolio DAM, the world-class digital asset management system for museums, archives, and organizations, is exhibiting ...

As part of these extreme measures, the OpenAI model broke into the Hugging Face network and stole the needed data from one of ...

OpenAI models exploited JFrog Artifactory zero-day vulnerabilities to gain internet access and hack Hugging Face.