Microsoft Edge exploit chain combines five bugs and two Windows features to bypass the browser sandbox and execute code .

CISA has added the Node2Shell flaw, tracked as CVE-2026-111497, to its Known Exploited Vulnerabilities catalog. Attackers are ...

Dream's 12 August 2026 research named Taiwan as the target of a four-day AI-agent intrusion in July 2026. Taipei confirmed it ...

Over the past few months, we’ve used an unreleased, internal research model to find critical vulnerabilities in some of the ...

A GitHub gist by Flamerix AI measured Claude Code's agent_summary feature consuming 16.4% of one week's spend, more than the 15.7% that went to the ...

The Coruna iOS exploit kit now ships with a DarkSword iOS 18 chain on 608 domains. zLabs breaks down its delivery, native ...

Articul8 launched Bivia on 28 October 2026: a multimodal decision model with nine primitives and an abstain switch. What it ...

Cursor opened a public beta of its TypeScript SDK on April 29, 2026, letting developers run its coding agent in CI, backends ...

HTTP2Shell is a critical flaw in Google's Brotli decoder affecting Node.js, Python, Bun and other software. Learn about the ...

QA Financial rounds up the latest vendor announcements affecting software quality, testing, audit evidence and operational ...

Google announced Gemini 4 Carbon on October 28, 2026, but its newest model starts with selected cybersecurity defenders ...

Security roundup: PHP2Shell, eMudhra certificate failures, Node.js security fixes and the LiteLLM supply-chain attack reshape ...