WordPress backup plugin vulnerability CVE-2026-19949 in All-in-One WP Migration exposes 3.25 million unpatched sites to unauthenticated remote code execution, with a weaponized proof-of-concept ...

Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow unauthenticated remote code execution. The vulnerability in question is ...

The ex-head of Yandex Search is launching a new AI-native search engine tailored for intelligent agent systems, aiming to ...

AI’s R2R platform hand unauthenticated attackers full PostgreSQL superuser access Two critical SQL injection vulnerabilities ...

Chrome zero-day attacks, router hijacks, Coder’s supply chain breach, image-free QR phishing, and more security news.

Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP platform that can lead to remote code execution.

Late last week, researchers revealed OpenAI-linked agents commandeered a neglected German programming wiki durin ...

Threat actors are actively attempting to exploit CVE-2026-9586, a critical unauthenticated SQL injection vulnerability in ...

And, as with other AI-powered threats, prompt injection attacks are accessible to people without special skills. “I don’t ...

A high-severity vulnerability in the All-in-One WP Migration and Backup plugin could allow unauthenticated attackers to take over vulnerable WordPress sites.

ESET said on August 31 that the Russia-aligned UAC-0099 group embedded a safety-sensitive prompt as a comment in a malicious VBS script used against a target in Ukraine. The technique, dubbed ...