The tool's HTML preview mechanism had a flaw allowing malicious JavaScript to access local files and exfiltrate cloud ...
Two newly disclosed vulnerabilities in Discourse let unauthenticated attackers execute JavaScript against anonymous visitors ...
Bricksforge's CVE-2026-85097 is under active exploitation and allows unauthenticated PHP execution on affected WordPress ...
A Discourse image upload exploit allowed basic users to read server files by chaining a JPEG processing delay, Ghostscript ...
M crypto hack, active Citrix exploits, AI agents going off-script, phishing takedowns, ransomware, and key CVEs.