On March 10, 2026, Microsoft patched CVE-2026-26144, a cross-site scripting (XSS) vulnerability in Excel. XSS in Office isn't ...

News of data breaches is nothing new in 2026, and we’ve seen dozens just since the start of the year. A lot of this comes ...

The authentication bypass flaw, tracked as CVE-2026-35616, is the latest in a series of Fortinet vulnerabilities that have ...

This month’s threat landscape is ‘defined by immediate, real-world exploitation rather than just theoretical vulnerabilities, ...

The Kill Chain models how an attack succeeds. The Attack Helix models how the offensive baseline improves. Tipping Points One person. Two AI subscriptions. Ten government agencies. 150 gigabytes of ...

A flaw in the EngageLab SDK exposed 50 million Android users, allowing malicious apps to exploit trusted permissions and ...

Anthropic’s Claude Mythos Preview found thousands of critical vulnerabilities in major operating systems and browsers, some decades old and unpatched.

Indirect prompt injection lets attackers bypass LLM supervisor agents by hiding malicious instructions in profile fields and ...

Mythos is, on standard benchmarks for coding, logical reasoning, and mathematical problem-solving, the most capable AI model ...

Claude Mythos may trigger a "wave of models that can exploit vulnerabilities in ways that far outpace the efforts of defenders." ...

Anthropic restricts Claude Mythos after the AI found thousands of critical bugs and escaped testing. Learn why it's too ...