Adobe patches CVE-2026-34621 after active exploitation since Dec 2025, preventing remote code execution via malicious PDFs.

Oops. A 60MB source map file just leaked Anthropic's entire roadmap.

A credit card skimmer campaign discovered in early 2025 and still actively tracked as of April 2026 has compromised an ...

GlassWorm uses a fake WakaTime VS Code extension to infect IDEs, deploy RATs, and steal data, prompting urgent credential ...

Now a security researcher says a Reader hole has been quietly exploited by malware for as long as four months, fingerprinting ...

SAN FRANCISCO, CA / / April 8, 2026 / Open‑source software released today could significantly lower transaction fees on zero‑knowledge rollups, potentially ending the trade‑off between low cost ...

The design flaw in Flowise’s Custom MCP node has allowed attackers to execute arbitrary JavaScript through unvalidated ...

Hackers are exploiting a maximum-severity vulnerability, tracked as CVE-2025-59528, in the open-source platform Flowise for ...

Threat actors have started exploiting CVE-2025-59528, a critical Flowise vulnerability leading to remote code execution.

The Internet Bug Bounty program has paused new submissions, citing a massive expansion in vulnerability discovery by AI code ...

Within days of each other, Anthropic first leaked the source code to Claude Code, and then a critical vulnerability was found ...

The exposure traces back to version 2.1.88 of the @anthropic-ai/claude-code package on npm, which was published with a 59.8MB ...