WordPress launched an AI-powered security initiative to detect core vulnerabilities before attackers can exploit them.

External data should be treated as hostile until it has been checked, constrained, and transformed for the specific place it will be used. That applies whether the data comes from a browser form, a ...

CVE-2026-81421 in sentry-selfhosted-mcp turns a self-hosted Sentry instance into a pivot point for lateral movement. The ...

A yet unspecified vulnerability affecting print management solutions PaperCut NG and PaperCut MF is being exploited by ...

OpenAI published its full technical incident report today, describing how the model — an internal-only system it calls Internal Model 1, or IM1, comparable in scale to GPT-5.6 Sol — escaped evaluation ...

Taiwan indicts nine, including a Super Micro exec and an Nvidia employee, over a scheme to smuggle Nvidia AI servers to China via forged paperwork.

TL;DR Broadcom released a large batch of Spring security advisories on August 20, 2026, with Sonatype tracking 91 CVEs across ...

CISA warns MLflow CVE-2026-64849 SSRF allows unauthenticated attackers to steal cloud credentials. Patch to version 3.15.0 immediately.

Een kritieke kwetsbaarheid in AI-platform MLflow wordt misbruikt bij aanvallen, zo meldt het Amerikaanse cyberagentschap CISA. MLflow is een open source 'AI engineering platform' voor het ontwikkelen, ...

Atlassian and Splunk this week announced patches for over 250 vulnerabilities across their products, including dozens of critical- and high-severity flaws. On Tuesday, Atlassian published a Security ...

Hackers are exploiting CVE-2026-64849, a critical SSRF vulnerability in MLflow, to steal credentials and secrets.

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds an MLflow vulnerability to its Known Exploited Vulnerabilities catalog.