Max severity Flowise RCE vulnerability now exploited in attacks

Hackers are exploiting a maximum-severity vulnerability, tracked as CVE-2025-59528, in the open-source platform Flowise for ...

The silent “Storm”: New infostealer hijacks sessions, decrypts server-side

New "Storm" infostealer skips local decryption, sending browser data to attacker servers. Varonis shows how server-side decryption enables session hijacking, bypassing passwords and MFA.
InfoQ

Anthropic Releases Claude Mythos Preview with Cybersecurity Capabilities but Withholds Public Access

Anthropic has introduced Claude Mythos Preview, its most advanced AI model, improving significantly in reasoning, coding, and ...

Apple study details an AI-powered tool that helps developers build interface prototypes

This experimental AI-powered tool helped developers explore and refine interface ideas with more control than with typical AI ...