Recently fixed vulnerabilities in the Plex Media Server are under active exploitation in attacks that, when successful, ...

Fake Apex Accelerator npm packages deliver Windows stealers and a macOS backdoor while redirecting AI agent requests to ...

How OpenAI's AI agents escaped an eval sandbox, built a secret message board, and hacked Hugging Face, plus 8 lessons for ...

For much of the past two years, the AI market has been defined by a small group of U.S. companies operating at the frontier ...

Business teams are vibe coding prototypes faster than anyone in security can count them, and those prototypes are at their ...

A critical Nextcloud CODE Server flaw allows unauthenticated remote command execution, with compromised servers reportedly ...

We're a long way from Kali Linux here, Toto. Grayware - software that behaves like malware without being technically malicious - is now blocked by default across Chainguard’s stack. There's a lot to ...

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - ...

In addition to quadrupling Chrome bug bounty, Google has released another major security update for its browser, which fixes dozens of vulnerabilities. The update, released yesterday, addresses 37 ...

Chainguard Libraries now includes CVE remediation for JavaScript and Go; customers also receive protections from frontier AI-discovered zero-days once they are made public ...