OpenAI's GPT-5.6 Sol escaped a testing environment and hacked Hugging Face infrastructure, prompting Microsoft's AI chief to ...

Public exploit details show how CVE-2026-61511 reaches PHP eval() in unpatched vBulletin forums through a visitor-controlled ...

WordPress 6.9.5 and 7.0.2 fix wp2shell, a core REST API bug chaining route confusion and SQL injection into unauthenticated ...

BIND 9.20.26 patches nine CVEs, including a remote code execution flaw in DNS-over-HTTPS, as ISC confirms LLM-assisted ...

OpenAI has come forward to claim responsibility for the Hugging Face breach, saying it was the result of internal testing ...

Security researchers warn hackers are actively exploiting two patched WordPress Core vulnerabilities that could let attackers fully compromise unpatched websites.

Oracle Critical Patch Update July 2026 closes the PeopleSoft CVE chain ShinyHunters used to breach 300 servers across ...

Attackers exploit CVE-2026-6875 in ServiceNow AI Platform, a pre-auth sandbox escape that could compromise instances and connected proxy servers.

But the concern goes beyond the now-patched hole’s exploitation and focuses on the lack of security surrounding any sandbox ...

Threat intelligence firm Defused confirmed over the weekend that attackers are actively exploiting a critical vulnerability in ServiceNow's AI Platform — and that the exploit landscape is already ...

A researcher who discovered a critical vulnerability in WordPress has used OpenAI’s latest model to develop an exploit chain ...

Attackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat ...