Latest News
Prompt injection attacks continue to present the most dangerous threat from large language models (LLMs), despite the relatively low number of recorded…
Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitrary files from application…
Security researchers have warned of a major new Shai-Hulud-based campaign which has already compromised more than 430 packages with a combined two…
A critical sandbox escape vulnerability has been disclosed in the popular vm2 Node.js library that, if successfully exploited, could allow attackers to…
The UK’s Information Commissioner’s Office (ICO) has launched an investigation into Elon Musk’s social network X (formerly Twitter) in relation to non-consensual…
Threat actors with ties to China have been observed using an updated version of a backdoor called COOLCLIENT in cyber espionage attacks…
A critical security flaw affecting Docker’s Ask Gordon AI assistant has been disclosed by cybersecurity researchers, revealing how unverified metadata can be…