A calendar-based prompt injection technique exposes how generative AI systems can be manipulated through trusted enterprise ...

Researchers found an indirect prompt injection flaw in Google Gemini that bypassed Calendar privacy controls and exposed ...

Anthropic has launched Cowork with a known data exfiltration vulnerability that researchers reported in October 2025 but ...

The latest update from Microsoft deals with 112 flaws, including eight the company rated critical — and three zero-day ...

A vulnerability in the AIOSEO plugin affecting up to 3 million installations adds to the six vulnerabilities found in 2025.

Fortinet released updates for FortiOS and other products on Wednesday night. They fix, in some cases critical, ...

The first round of SAP patches for 2026 resolves 19 vulnerabilities, including critical SQL injection, RCE, and code ...

SAP addresses 17 security vulnerabilities on January Patchday. Four of them are considered critical security risks.

Security teams have always known that insecure direct object references (IDORs) and broken authorization vulnerabilities exist in their codebases. Ask any ...

There’s a well-worn pattern in the development of AI chatbots. Researchers discover a vulnerability and exploit it to do ...

Open WebUI, an open-source, self-hosted web interface for interacting with local or remote AI language models, carried a high ...

As OpenAI and other tech companies keep working towards developing agentic AI, they’re now facing some new challenges, like how to stop AI agents from falling for scams. OpenAI said on Monday that ...